Milter-greylist

Moritz Both <mb@...> wrote:

> so I searched the correct implementation for me and it seemd
> thet milter-greylist was it.

Yes, that's probably right :)

> The whitepaper describes a need for delaying the tempfail message until
> the end of the DATA phase if the sender address is null. It appears to
> me that milter-greylist does not do that. Giving a increasing number of
> servers doing a "callback" to verify the sender address, doesn't this
> delay sending mail in an unneccessary way?

That's right. The motivation behind filtering at the RCPT stage is that
we can perform greylisting for some users and not for others. If you
filter at the DATA stage, every recipient ge the same behavior.

A good fix would be to filter at RCPT stage except if the sender is <>
 
> 3. On debian woody, which is what we use, you have to do the following
> in order for milter-greylist to build:
> 
>   apt-get install libmilter-dev
>   ln -s . /usr/lib/libmilter/lib
>   ./configure --with-libmilter=/usr/lib/libmilter
> 
> This has been reported before on this list. Maybe the information could
> be included in the README file.

A much better way of handling that issue would be to fix the Debian
package. Who did it?
 
> 4. The whitepaper also suggests a record expire time of 36 days. Which
> expirery times do folks use? The defaults configuration file has three
> days only. Probably this is due to the fear of too much memory consumption?

Also because most mail servers will give up after retrying for 3 or 5
days.

-- 
Emmanuel Dreyfus
Publicité subliminale: achetez ce livre!
http://www.eyrolles.com/Informatique/Livre/9782212114638/livre-bsd.php
manu@...