Re: [milter-greylist] Ratelimit per authenticated user
2016-09-08 by maren.zubizarreta@...
Hello again: I already tested the regular expression: sm_macro users_macro {auth_authen} /user1|user2/ and it seems to work well, so now my definitive
Yahoo Groups archive
Messages
Page 8 of 144 · 7199 messages matched
2016-09-08 by maren.zubizarreta@...
Hello again: I already tested the regular expression: sm_macro users_macro {auth_authen} /user1|user2/ and it seems to work well, so now my definitive
2016-09-08 by maren.zubizarreta@...
Hi Btw, As I understand it, in your example you are acounting all mesages, but you can tune this using key , for example: ratelimit spam hosts rcpt 25 / 3h
2016-09-08 by Emmanuel Dreyfus
... {auth_authen} contains the authenticated userid. You can make specific rules for specific values if you want. -- Emmanuel Dreyfus manu@netbsd.org
2016-09-08 by Marcus Schopen
On 2016-09-08 12:47, Johann Klasek johann@klasek.at [milter-greylist] ... Johann, right! This is a typo. :o I meant /.*@mydomain .de/ . Ciao Marcus
2016-09-08 by Serge Stepanov
Btw, Could you explain how ratelimit is accounting? It account all events or only when any acl trig ? For example i want to count only spam messages at data
2016-09-08 by Johann Klasek
... [..] ... Beside this, I m wondering if /*.@mydomain.... does really make any sense either. Was /.*@mydomain meant? Incidentally it might work because *
2016-09-08 by maren.zubizarreta@...
I mean, using postfix
2016-09-08 by maren.zubizarreta@...
Thanks: I think I have it, my only doubt is how would you set exception s as these proposed by Can, for unauthenticated user, or for a specific user, would you
2016-09-08 by Emmanuel Dreyfus
... I use that, assuming users post from 192.0.2.0/24 ratelimit users rcpt 100 / 10m key %M{auth_authen} racl blacklist addr 192.0.2.0/24 ratelimit users
2016-09-08 by maren.zubizarreta@...
Thanks for the answers: Do you know if I can implement a macro like this with postfix? or it s limited to sendmail?
2016-09-08 by Can Şirin
Serge is right. We are using ratelimiting per authenticated user with this way. Here is the rule that you can use: ratelimit standart_limit rcpt 2 / 1h key
2016-09-08 by Serge Stepanov
maybe to use auth macro as key key %M{auth_authen}%i I didnt test this... Reply via web post ... maybe to use auth macro as key key %M{auth_authen}%i I didnt
2016-09-08 by maren.zubizarreta@...
Thanks, We actually have such rules: list HORDE addr { 10.0.100.41 10.0.100.42 10.0.100.43 10.0.100.44 10.0.100.45 } ratelimit MAILS_PER_HOUR rcpt 200 /
2016-09-08 by maren.zubizarreta@...
Hello again, We want to limit both cases, this is, when an authenticated user sends more than X mails, just stop it. We use milter-greylist since 2012, but now
2016-09-08 by Marcus Schopen
On 2016-09-08 09:39, Marcus Schopen lists-yahoogroups@localguru.de ... Some examples/ideas:
2016-09-08 by Marcus Schopen
Hi Maren, ... Would interest me too, good idea! Do you think changing IPs on a smtp-auth account is a good hint of abuse? What if all spam is sent from one IP,
2016-09-08 by Marcus Schopen
On 2016-09-07 20:31, Marcus Schopen lists-yahoogroups@localguru.de ... Seems to work now. I forgot to enable extendedregex on my fresh set up testing host. ;)
2016-09-08 by maren.zubizarreta@...
Hello: We want to implement an ACL with a ratelimit per authenticated user, this is to prevent SPAMMing when one of our user s credentials are stolen, and a
2016-09-08 by Marcus Schopen
Hi, On 2015-08-18 13:50, Marcus Schopen lists-yahoogroups@localguru.de ... Checking some logs this morning I d like to come back to above problem one year ago.
2016-09-07 by Marcus Schopen
Hi Mauricio, On 2016-09-08 00:48, Mauricio Teixeira mauricio.teixeira@gmail.com ... Beside the technical problem I m asking myself what is the benefit of an
2016-09-07 by Mauricio Teixeira
I have contacted them, but that s no the point. They re not the first and won t be the last, and I am tired of managing an exception list. I want things more
2016-09-07 by Bill Levering
Mauricio, Have you tried contacting skcc.com ? say… abuse@ or postmaster@ It is also strange that the mail is from mymail.skcc.com when the MX for skcc.com
2016-09-07 by Jim Klimov
... Well then, you have to somehow maintain a whitelist of counteragents you trust. I thought of having milter-greylist (or some other milter) sit on the
2016-09-07 by Mauricio Teixeira
I agree with you guys that the sender should be doing the right thing, but they re not, and this is only one example of a dozen I have. My only workaround so
2016-09-07 by Bill Levering
I also agree, this is the proper result. Legit institutions that send mail should have their act together. (properly configured dns) Also, if someone is
2016-09-07 by Marcus Schopen
Hi, On 2016-09-06 20:41, Mauricio Teixeira mauricio.teixeira@gmail.com ... Am Dienstag, den 06.09.2016, 15:41 -0300 schrieb Mauricio Teixeira ... I m not sure
2016-09-07 by Marcus Schopen
Hi, as a test I d like to block all mails from sender @spammer.com to my recipient domains mydomain1.de and mydomain2.de. All other mails from @spammer.com to
2016-09-07 by Marcus Schopen
Hi Emmanuel, On 2016-09-07 08:48, Emmanuel Dreyfus manu@netbsd.org [milter-greylist] ... These packages were not patched with your rawfrom acl patch, it s just
2016-09-07 by Emmanuel Dreyfus
... On this topic, you did not gave me feedback about the patch implementing rawfrom acl clauses. Does it work? -- Emmanuel Dreyfus manu@netbsd.org
2016-09-06 by Mauricio Teixeira
... I find it interesting that this topic just happened while I was scratching my head on a similar situation. I ve seen cases where the reverse does not match
2016-09-06 by Jim Klimov
... Arguable. Usually having control over DNS including PTR entries of assigned IP addresses is a sign of legit relays. But not all ISPs are forthcoming in
2016-09-06 by Marcus Schopen
Hi, I built Ubuntu packages (precise and trusty) for version 4.6.1: https://www.binux.de/debian/milter-greylist/ The packages contain a patch to disable strip
2016-09-06 by Marcus Schopen
On 2016-09-06 11:35, Marcus Schopen lists-yahoogroups@localguru.de ... Btw: is it a good idea not to delay such servers, but to blacklist? Ciao!
2016-09-06 by Marcus Schopen
Hi, On 2016-09-06 12:00, Leonardo Arena rnalrd@gmail.com [milter-greylist] ... Ahhh, no, I don t. What exactly is the difference between extendedregex and
2016-09-06 by Leonardo Arena
On mar, 2016-09-06 at 11:35 +0200, Marcus Schopen lists- ... do you have extendedregex in your config file? Cheers, - leonardo
2016-09-06 by Marcus Schopen
Hi, got some .ua spam today and was wondering why the delay for hosts without reverse DNS doesn t work: Copied from:
2016-09-05 by Marcus Schopen
On 2016-09-05 14:28, Emmanuel Dreyfus manu@netbsd.org [milter-greylist] ... HERE! :)
2016-09-05 by Marcus Schopen
On 2016-09-05 13:39, Marcus Schopen lists-yahoogroups@localguru.de ... Arrr, too much coffee, too little sleep. Just deleting the line if ((idx =
2016-09-05 by Emmanuel Dreyfus
... I have some code that builds, but no time to test. Any volunteers? -- Emmanuel Dreyfus manu@netbsd.org
2016-09-05 by Marcus Schopen
Hi, On 2016-09-05 05:23, Emmanuel Dreyfus manu@netbsd.org [milter-greylist] ... I tried to build a new package just deleting these two lines from source: if
2016-09-05 by Jim Klimov
... Sounds reasonable and describes (or at least hints to rtfm) the difference in purpose ;) Jim -- Typos courtesy of K-9 Mail on my Samsung Android
2016-09-05 by Marcus Schopen
On 2016-09-05 09:39, Emmanuel Dreyfus manu@netbsd.org [milter-greylist] ... I like the idea of alternative filtering on from and the original envelope from.
2016-09-05 by Emmanuel Dreyfus
... Yes, but we need a name. rawfrom is thebetter I found so far. -- Emmanuel Dreyfus manu@netbsd.org
2016-09-05 by Jim Klimov
... I d say an alternative clause would be more granular in usage, so rules can be done for both types of address in the same config. -- Typos courtesy of K-9
2016-09-05 by Emmanuel Dreyfus
Hello The problem you report stems from this code in milter-greylist.c : /* * Strip anything before the last = in the * source address. This avoid problems
2016-09-05 by Jim Klimov
... Look if both milters use the same or different milter-macros for the email address? If the same, then it is MGL chopping off something, and it is something
2016-09-04 by Marcus Schopen
Hi Jim, On 2016-09-04 23:53, Jim Klimov jimklimov@cos.ru [milter-greylist] ... I turned on verbose logging. A test with mail from:
2016-09-04 by Jim Klimov
... Now I wonder if the code handles SRS somehow (maybe the MTA code, not milter-greylist itself), so the regex does not actually get that string at input,
2016-09-04 by Marcus Schopen
Hi, I think there is a problem filtering addresses with equal signs in it typically used by SRS addresses. Using this regular expression
2016-09-04 by Marcus Schopen
Hi, a regular expression like /.*test123@udag.de/ is working and blocks as expected; also /.*test456.*test789@udag.de/ blocks