Question about reordering acl/racl rules
2014-11-20 by Jonathan Siegle
Hi all, I have a question about milter-greylist-4.4.3 and its ability to reload the greylist.conf file while the daemon is running. greylist.conf has about 150
Messages
Browse messages
Page 16 of 144 · 7199 messages matched
milter-greylist still blocking STARTTLS mail
2014-10-17 by Tom Yates
I have a CentOS 6 server, running milter-greylist 4.2.7-1 from RPMforge, and try as i might, i can t seem to get it to acknowledge that successful STARTTLS has
Any newer version than 4.3.9 compilation on CentOS fails.
2014-10-12 by Mart Pirita
Any newer version than 4.3.9 compilation on CentOS fails. Just testedmilter-greylist-4.5.7 and milter-greylist-4.5.11, using Cento5.11 or Centos 6.5 x64,
Re: [milter-greylist] MX patch [1 Attachment]
2014-10-08 by reschauzier@...
Thanks, Emmanuel!
Re: [milter-greylist] MX patch [1 Attachment]
2014-10-05 by manu@...
Rudy Eschauzier reschauzier@yahoo.com [milter-greylist] ... Very simple patch! I checked it in. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
MX patch
2014-10-03 by Rudy Eschauzier
Attached patch fixes a minor issue in the MX functionality of milter-greylist. The MX function compares the sending IP address to the IPs of the mail servers
Re: [milter-greylist] whitelisting messages that pass DMARC authentication
2014-09-08 by manu@...
Andrew J. Schorr aschorr@telemetry-investments.com [milter-greylist] ... Hey, you are right. Peeking as the sources I can see we support dacl greylist. I
Re: [milter-greylist] whitelisting messages that pass DMARC authentication
2014-09-07 by Andrew J. Schorr
Hi, ... Thanks for getting back to me, but I m a bit confused. The man page for greylist.conf says, in part: ACL using the racl keyword are evaluated at the
Re: [milter-greylist] whitelisting messages that pass DMARC authentication
2014-09-07 by manu@...
Andrew J. Schorr aschorr@telemetry-investments.com [milter-greylist] ... No, because milter-greylist does greylisting at RCPT stage, and DMARC header is only
whitelisting messages that pass DMARC authentication
2014-09-06 by Andrew J. Schorr
Hi, I m a newbie, so please forgive me if I m asking a stupid question. I have already configured milters for smf-spf + opendkim + opendmarc. I would like to
Re: [milter-greylist] HELO not "%d" misfires too often
2014-08-30 by manu@...
Jim Klimov jimklimov@cos.ru [milter-greylist] ... I think you found a bug: acl_helo_strstr() uses strstr(). It is case sensitive. That does not explain your
HELO not "%d" misfires too often
2014-08-29 by Jim Klimov
A while ago I was suggested to use helo not %d constructs to verify if DNS PTR and HELO names of a remote relay agree. Unfortunately, either I do something
Re: [milter-greylist] Error in /var/log/maillog
2014-08-20 by Jim Klimov
... OTOH, such errors I ve usually seen during the parsing of confih file. Make sure its line 245 is sane ;) generally it is slmething to worry about because
Re: [milter-greylist] Error in /var/log/maillog
2014-08-19 by Thomas Cameron
On 08/19/2014 12:54 PM, shuttlebox shuttlebox@gmail.com ... Many thanks!
Re: [milter-greylist] Error in /var/log/maillog
2014-08-19 by shuttlebox
On Tue, Aug 19, 2014 at 7:35 PM, Thomas Cameron thomas.cameron@camerontech.com [milter-greylist] ... http://milter-greylist.wikidot.com/faq ... No need.
Error in /var/log/maillog
2014-08-19 by Thomas Cameron
I am seeing this in my maillog: Aug 19 13:30:41 lindalee milter-greylist: unknown token
Re: [milter-greylist] Autowhiting for expected replies (to email posted by our users) in advance
2014-08-15 by manu@...
Jim Klimov jimklimov@cos.ru [milter-greylist] ... An mx clause for ACL has been for a long time on the wish list. It would query the DNS for a MX record in the
Re: [milter-greylist] Commanding milter-greylist remotely to forget auto-whitelist entries
2014-08-15 by manu@...
Jim Klimov jimklimov@cos.ru [milter-greylist] ... Would you be able to tell SA to feed your own local DNSRBL? This can be done through scripting using
Autowhiting for expected replies (to email posted by our users) in advance
2014-08-13 by Jim Klimov
In my typical setup, email from our users flows from an internal mail server to internet-facing relays and finally to remote recipients. Opposite is also
Commanding milter-greylist remotely to forget auto-whitelist entries
2014-08-13 by Jim Klimov
Hello all, The mail servers I manage have come to a point where simple DNSRBL boosted by milter-greylisting (MGL) delays, SMTP service banner delays, DNS
Re: tarpit auto-whitelisting
2014-06-24 by Frank Doepper
... I would expect something like: Jun 24 13:17:19 host milter-greylist: s5OBHIxX025868: skipping greylist because tarpit is requested,
Re: tarpit auto-whitelisting
2014-06-24 by Frank Doepper
... Sure? I use 4.3.9, but the patch applies to 4.4.3 and 4.5.11, too. I redo it with -U16 and put it there: http://taz.de/~fd/stuff/tarpit.patch Best regards,
Re: [milter-greylist] tarpit auto-whitelisting
2014-06-24 by Kouhei Sutou
Hi, In [milter-greylist] tarpit auto-whitelisting on Sat, 21 Jun 2014 23:05:05 +0200, ... Could
Re: [milter-greylist] Re: tarpit auto-whitelisting [1 Attachment]
2014-06-24 by manu@...
Frank Doepper fd@taz.de [milter-greylist] ... Patch does not apply. What milter-greylist version are you using? Please redo with diff -U16 so that I can be
Re: tarpit auto-whitelisting
2014-06-23 by Frank Doepper
... I think I ve got it. Patch attached. Frank.
Re: [milter-greylist] Re: tarpit auto-whitelisting
2014-06-23 by Emmanuel Dreyfus
... Well, I did not write that part. Anyone? -- Emmanuel Dreyfus manu@netbsd.org
Re: tarpit auto-whitelisting
2014-06-23 by Frank Doepper
Hi, ... I had a look at milter-greylist.c, line 802ff: if (sleep_duration 0) { if (sleep_duration priv- priv_max_tarpitted) priv- priv_max_tarpitted =
tarpit auto-whitelisting
2014-06-21 by Frank Doepper
Hi, thank you for providing milter-greylist and tarpit. ... It seems that this auto-whitelisting does not work. Assumed that the sender is able to wait,
RE: [milter-greylist] hang in new configuration load
2014-05-14 by Bruncsak, Attila
... That is right. With my variant one given thread may stuck forever that does not change. The big advancement that the stuck thread does not hold any lock,
Re: [milter-greylist] hang in new configuration load
2014-05-14 by Emmanuel Dreyfus
... I understand the symptom vanish in the short term (which is desirable, I do not oppose the change), but you still have stuck threads that eat more ane more
Re: [milter-greylist] hang in new configuration load
2014-05-14 by Johann Klasek
... Attilas variant seems to eleminate the cause so you have no symptoms at all, isn t that so? This look common to me for such cases where to build a
RE: [milter-greylist] hang in new configuration load
2014-05-14 by Bruncsak, Attila
... Currently, the threads are accumulated because they are all permanently waiting on a lock to have the new configuration available. With my proposal only
Re: [milter-greylist] hang in new configuration load
2014-05-14 by manu@...
Bruncsak, Attila attila.bruncsak@itu.int [milter-greylist] ... We still don t address the problem of stuck threads that accumulate to the point the process
RE: [milter-greylist] hang in new configuration load
2014-05-13 by Bruncsak, Attila
... What about the following? The config_load() creates a totally new ACL list not relaying on any existing data (no locking is needed than). The ACL list has
Re: [milter-greylist] hang in new configuration load
2014-05-13 by Emmanuel Dreyfus
... I agree. But the problem here is that acl_filter() is working on an ACL entry and we do not want it to be freed during its operation. We do a rought lock
RE: [milter-greylist] hang in new configuration load
2014-05-13 by Bruncsak, Attila
... As a principle all lock protected critical section must not contain any other actions than manipulating the memory of the process shared between the
Re: [milter-greylist] hang in new configuration load
2014-05-12 by manu@...
Bruncsak, Attila attila.bruncsak@itu.int [milter-greylist] ... In acl.c we have a rather long ACL_RDLOCK/ACL_UNLOCK in acl_filter(). It calls
RE: [milter-greylist] hang in new configuration load
2014-05-12 by Bruncsak, Attila
... So here we are: (gdb) thread 3462 [Switching to thread 3462 (Thread 0x2abf9a881940 (LWP 679))]#0 0x00002abf96aeb5f0 in pthread_rwlock_wrlock () from
Re: [milter-greylist] hang in new configuration load
2014-05-02 by manu@...
... Um we are in libmilter. That one will be hard to debug. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
RE: [milter-greylist] hang in new configuration load
2014-05-02 by Bruncsak, Attila
... (gdb) bt #0 0x00002abf96fe2346 in poll () from /lib64/libc.so.6 #1 0x000000000042c707 in mi_listener () #2 0x000000000042ba61 in smfi_main () #3
Re: [milter-greylist] hang in new configuration load
2014-05-02 by manu@...
... What does bt tell? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
RE: [milter-greylist] hang in new configuration load
2014-05-02 by Bruncsak, Attila
... Here I am: (gdb) attach 2945 Attaching to process 2945 Reading symbols from /usr/local/bin/milter-greylist...done. warning: .dynamic section for
Re: [milter-greylist] hang in new configuration load
2014-05-01 by manu@...
... So if you attach the process with gdb, where are you? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
RE: [milter-greylist] hang in new configuration load
2014-05-01 by Bruncsak, Attila
... It always builds with -g flag for the C compiler by default. It requires special configuration effort to switch off the debugging.
RE: [milter-greylist] hang in new configuration load
2014-05-01 by Bruncsak, Attila
... The configuration file contains now 75893 entries. It is created dynamically, and changes about once an hour. Before applying to production there is a
Re: [milter-greylist] hang in new configuration load
2014-05-01 by Jim Klimov
... I also used to always reload, though in my recent deployments I did switch to dynamic reloading by updating the config file. On this list I was kindly
Re: [milter-greylist] hang in new configuration load
2014-05-01 by manu@...
... Could you build with -g and check where exactly it stalls in conf_load_internal()? ... I must confess I never reload, I always restart. -- Emmanuel Dreyfus
hang in new configuration load
2014-05-01 by Bruncsak, Attila
Hello, Sometimes the milter-greylist (V4.5.10) hangs when trying to load new configuration file. There are more than 24000 threads, all are blocked in
Re: [milter-greylist] Basic rate limit filter
2014-04-29 by Georgi Petrov
Hello Emmanuel, Thanks a lot for your advice! It indeed worked. The rules are now: ratelimit virtualmin_limit_local rcpt 3 / 10m key %f racl greylist addr
Re: [milter-greylist] Basic rate limit filter
2014-04-22 by Emmanuel Dreyfus
... have a not addr 127.0.0.1 clause in the second ACL, or add a racl whitelist addr 127.0.0.1 between the two ACLs. ... Define two ratelimit and use two