re: Recommendation for static ADSL IP's
2008-03-02 by Alan Clifford
On Sun, 2 Mar 2008, Michael Mansour wrote: MM MM For me, I have lost one client because of this since I started using MM greylisting. Even while I turned it
Yahoo Groups archive
Messages
Page 61 of 144 · 7199 messages matched
2008-03-02 by Alan Clifford
On Sun, 2 Mar 2008, Michael Mansour wrote: MM MM For me, I have lost one client because of this since I started using MM greylisting. Even while I turned it
2008-03-01 by Michael Mansour
Hi Ryan, ... Hmm.. so basically I d be allowing everything whitelisted from that ISP? It makes sense I think if I know that the ISP is a trustworthy ISP (as
2008-03-01 by Michael Mansour
Hi Emmanuel, ... I m a hosting provider yes, but I don t greylist my own clients, just greylist emails sent to their domains. There s plenty of spam each day
2008-03-01 by manu@netbsd.org
... I must have misunderstood something: you are an ISP, and you have to greylist your own clients? How does it works with casual users that have a mail
2008-03-01 by Michael Mansour
Hi Ryan, ... /[0-9]{1,3} -[0-9]{1,3} -[0-9]{1,3} -[0-9]{1,3}.* .static/ ... Although I totally agree with what you say above, it s difficult to explain proper
2008-03-01 by Benoit Branciard
... That s exactly the kind of client I would rather blacklist or heavy greylist. More than 90% of spam comes from infected customer ADSL clients, the ones
2008-02-29 by Brian W. Antoine
... Why would you want to whitelist a generic rDNS like that? My own server logs contain plenty of entries from infected PC s sitting behind entries like that
2008-02-29 by Ryan Moore
... Subject: [milter-greylist] Recommendation for static ADSL IP s From: Michael Mansour To: milter-greylist
2008-02-29 by Michael Mansour
Hi, Quite a few times I get greylist delays from senders that use their ISP s mail servers and thus come out looking as a sender from: Received: from
2008-02-29 by Ryan Moore
... Subject: Re: [milter-greylist] case sensitive checks on email recipient From: manu@netbsd.org To: milter-greylist@yahoogroups.com Date: Fri 29 Feb 2008
2008-02-29 by manu@netbsd.org
... My advice is to: a) Notify the broken sender admin so that it can fix it. and/or b) whitelist the broken sender IP address -- Emmanuel Dreyfus
2008-02-29 by manu@netbsd.org
... Well, I have it. My sendmail.cf has: O AuthOptions=A p y C{TrustAuthMech}LOGIN PLAIN O AuthMechanisms=LOGIN PLAIN Authentication works (over SSL), but
2008-02-29 by Bob Smith
... [...] ... Thanks for the suggestion -- SMTP AUTH works and is a much better solution. -- _______________________________________________________________
2008-02-29 by Ryan Moore
I ve been running milter-greylist for several months now and haven t really had any problems, however an issue came up a few days ago. It seems that
2008-02-29 by Matt Kettler
... IIRC you need to not just support it as an AUTH_OPTION, but also have a TRUST_AUTH_MECH. Check out http://www.joreybump.com/code/howto/smtpauth.html Which
2008-02-29 by Michael Mansour
Hi Emmanuel, ... In my production environment, I have: define(`confAUTH_OPTIONS , `A y )dnl and sendmail accepts authenticated users. What I showed int he
2008-02-29 by Emmanuel Dreyfus
... Well, I have A p y (y disables anonymous login), but sendmail still refuses relaying for authenticated users. -- Emmanuel Dreyfus manu@netbsd.org
2008-02-29 by Michael Mansour
Hi Emmanuel, ... dnl # The following allows relaying if the user authenticates, and disallows dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links dnl
2008-02-29 by manu@netbsd.org
... Indeed, that makes much more sense. ... While we are on this topic: how do you tell sendmail to allow relaying when SMTP AUTH or STARTTLS was validated? --
2008-02-28 by Matt Kettler
... So, you re trying to use milter-greylist s database to get around the fact that the DNS entry that has a very short TTL. I don t know that s a good
2008-02-28 by Matt Kettler
... It s a dyndns.org hostname, the TTL is very short as a result, so the cache isn t going to help you.
2008-02-28 by manu@netbsd.org
... Well, if you perform multiple similar DNS requests, they should not go beyond the cache of your DNS server... -- Emmanuel Dreyfus
2008-02-28 by shuttlebox
... Why don t you just whitelist your sender address? racl whitelist from bob@smith.com Sure, your address can be faked by a spammer but greylisting is just
2008-02-28 by Bob Smith
... I was thinking of something like racl whitelist dns foo.dynip.com lookup 3h to ease the load. The actual IP address which corresponds to foo.dynip.com
2008-02-28 by Benoit Branciard
... in milter-greylist 4.0+, you may implement it yourself with an ulrcheck clause and a small external app which does the foo.dynip.com DNS lookup, compares
2008-02-28 by Matt Kettler
... Nobody.
2008-02-28 by Kai Schaetzl
... But the lookup will reveal a different hostname each time. It will not resolve to foo.dynip.com. So, I think the solution is whitelist by sender. Kai --
2008-02-28 by Bob Smith
... That s fine. But I asked who does a DNS lookup on the IP address of foo.dynip.com so it can be compared to the IP address of the incoming SMTP connection?
2008-02-28 by manu@netbsd.org
... sendmail perform a DNS lookup on the IP address of the incoming SMTP connexion (a la getpeername(3)). -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz
2008-02-28 by Bob Smith
... Sorry, but I must be really thick. How is that Sendmail does a lookup on the DNS entry for (say) foo.dynip.com when that text never appears in the email?
2008-02-27 by manu@netbsd.org
... Sendmail does the DNS lookup and hands it to every milter. It makes much more sense than having each milter performing the same DNS request ever and ever.
2008-02-27 by Bob Smith
... I ve been thinking about this and am even more confused. Q1. Does the domain match do a DNS lookup to get the matching IP address each time it is asked to
2008-02-27 by Bob Smith
... Excellent! -- _______________________________________________________________ Bob Smith - bsmith@sudleyplace.com - http://www.sudleyplace.com
2008-02-27 by Emmanuel Dreyfus
... The domain clause match against the DNS address of the sender machine. -- Emmanuel Dreyfus manu@netbsd.org
2008-02-27 by Bob Smith
... I thought that mechanism matches the text foo.dynip.com to the base of all sending domains. In the case I m trying to cover, no email is sent with
2008-02-27 by Kai Schaetzl
... Ah, I didn t know that. Thanks, Matt. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com
2008-02-27 by Kai Schaetzl
... You are talking about a specific host, right? Why not use the from domain? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet
2008-02-27 by Matthias Scheler
... domain uses the rDNS, doesn t it? That won t work in that case because dynip hosts have rDNS setup my the ISP. Kind regards -- Matthias Scheler
2008-02-27 by manu@netbsd.org
... racl whitelist domain foo.dynip.com -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2008-02-26 by Matt Kettler
... AFAIK, there s nothing that currently supports this in milter-greylist. Can you use SMTP auth or TLS? ... acl is the old syntax, pre 3.1.3 and is the same
2008-02-26 by Bob Smith
I would like to whitelist email received from a DNS address (foo.dynip.com) which resolves to a dynamic IP address (and possibly a different one the next time
2008-02-26 by Bob Smith
... Thanks. -- _______________________________________________________________ Bob Smith - bsmith@sudleyplace.com - http://www.sudleyplace.com
2008-02-26 by manu@netbsd.org
... I fixed it in CVS. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2008-02-26 by Bob Smith
In greylist.conf, when I uncommented the two lines which called stat, I encountered the following error message when starting milter-greylist: ignored
2008-02-25 by shuttlebox
... I just registered http://milter-greylist.wikidot.com/. :-) -- /peter
2008-02-25 by manu@netbsd.org
... Indeed, we need a wiki for users to drop random config snipets. Would you like to start it up? I will add a link to it from the web site. -- Emmanuel
2008-02-25 by Ondrej Valousek
Hi Emmanuel, Ok you are right, this approach works - so my patch is actually not necessary. Anyway - many good configuration ideas (like the HELO check)
2008-02-25 by manu@netbsd.org
... That is harmless: messages sent locally fire this warning. I guess it should be removed. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2008-02-25 by manu@netbsd.org
... INPUT_MAIL_FILTER(`greylist ,`S=local:/var/milter-greylist/milter-greyli st.sock ) ... Well, the README says: Here again, confMILTER_MACROS_* are shared
2008-02-25 by Bob Smith
First of all, great program! I ran into some difficulty when first installing milter-greylisting because of my lack of knowledge. Had I been more