2006-12-31 by manu@netbsd.org
... And the images are embedded in the mail and referenced with a cid: URL? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
Thread view
Attachments: 0
2006-12-31 by Fabien Tassin
... not usable for me. That matches at least a third of my business emails, including customers and suppliers. All seems to be company enforced sigs with logos
Thread view
Attachments: 0
2006-12-30 by Emmanuel Dreyfus
Here is the latest snapshot: http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.3.tgz MD5 (milter-greylist-3.1.3.tgz) =
Thread view
Attachments: 0
2006-12-29 by Emmanuel Dreyfus
Hello Here is a new developement snapshot: Developement snapshot (not for production!) milter-greylist-3.1.2.tgz. MD5 (milter-greylist-3.1.2.tgz) =
Thread view
Attachments: 0
2006-12-26 by manu@netbsd.org
... I d like to use an OCR tool, but I m not tempted by spamassassin. My idea would be to have a stand-alone milter that scans the GIF and attach the scanned
Thread view
Attachments: 0
2006-12-26 by manu@netbsd.org
... It can be interesting to mix that with other conditions in the ACL: accept big mail from some senders or to some addresses. -- Emmanuel Dreyfus
Thread view
Attachments: 0
2006-12-26 by Joel Reicher
... No, not quite. What I have in mind is the effect of the following (but I wouldn t actually implement it this way) if (spf) foreach (i in spfRecord) if(i is
Thread view
Attachments: 0
2006-12-25 by Fabien Tassin
... issue a warning (syslog) at compile time then swap and use like the previous one. ... not sure that this lines command is useful though as people often
Thread view
Attachments: 0
2006-12-25 by manu@netbsd.org
... Update: http://ftp.Espci.fr/shadow/manu/dnsrbl2.diff -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
Thread view
Attachments: 0
2006-12-25 by manu@netbsd.org
... If I understand correctly your idea, you want to do this: if (spf) greylist (*, from, rcpt) else greylist (addr, from, rcpt) What happens if a spammert
Thread view
Attachments: 0
2006-12-25 by Federico Giannici
... It looks at the direct and reverse DNS informations of the last relay. Here it is part of the documentation. I found very interesting and effective the
Thread view
Attachments: 0
2006-12-25 by Joel Reicher
... OK, at least that addresses my concern for known mail farms, but the larger part of my concern is for *unknown* mail farms. When mail first arrives from
Thread view
Attachments: 0
2006-12-25 by manu@netbsd.org
... The right way would be to use subnet matching. wildcard would become 0.0.0.0/0, and it would allow more complex setups. Can you test this patch (against
Thread view
Attachments: 0
2006-12-25 by manu@netbsd.org
... How does it works? regexp paterns for dynamic hosts? DNSRBL? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
Thread view
Attachments: 0
2006-12-25 by manu@netbsd.org
... So you d want this, to whitelist example.net s mail farm: acl whitelist from /@example .net$/ spf -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz
Thread view
Attachments: 0
2006-12-25 by Federico Giannici
I find very limitative that the dnsrbl command require the EXACT IP to look for from the dnsrbl. If I want to make use of combined dnsrbl I m forced to use
Thread view
Attachments: 0
2006-12-25 by Federico Giannici
I m new to this mailinglist so I don t know if this has already been proposed... Have you considered to implement the tests done by the BotNet plugin of
Thread view
Attachments: 0
2006-12-24 by Joel Reicher
... Sorry, I must be missing something, because I really don t see the point of that. Why use SPF if you re going to enter the IP netblock by hand anyway? To
Thread view
Attachments: 0
2006-12-24 by manu@netbsd.org
... Today, SPF whitelisting is global and apply to any message. If we include it in the ACL framework, you can use it in conjunction with other criterions,
Thread view
Attachments: 0
2006-12-24 by Joel Reicher
... How would that be different from the current situation? I want to use SPF to deal with mail farms so that I don t have to enter them all by hand, but I
Thread view
Attachments: 0
2006-12-24 by manu@netbsd.org
... The point about having SPF as an ACL clause is that you can use it with other clauses. You could decide to trust SPF for mail coming from a set of IP
Thread view
Attachments: 0
2006-12-24 by Joel Reicher
... Sorry, I should have been making this point only with respect to SPF, so forget about the conf file syntax stuff I mentioned. I forgot about this obviously
Thread view
Attachments: 0
2006-12-24 by Joel Reicher
... I m not sure if this has already been dealt with, but the mechanisms in 3.0 for dealing with mail farms by whitelisting them, be it based on IP or SPF,
Thread view
Attachments: 0
2006-12-23 by manu@netbsd.org
... As of today you can do that by feeding a local DNSRBL and using it within milter-greylist. What s wrong withthis approach, and what would we win with
Thread view
Attachments: 0
2006-12-23 by manu@netbsd.org
Here are the next planned features for the CVS version. Feel free to comment: 1) SMTP DATA stage ACL We now have (in CVS) dacl rules, for ACL evaluated after
Thread view
Attachments: 0
2006-12-23 by reschauzier
... I have been giving autoblacklisting a lot of thought, so please allow me to give my ideas about this topic. Currently, I run a setup with a honeypot
Thread view
Attachments: 0
2006-12-23 by manu@netbsd.org
... Is bad feedbacks a synonym for no time to implement it myself, but feel free to do it ? :-) ... Let s try to move forward on the autoblack idea: what
Thread view
Attachments: 0
2006-12-23 by An.H.Nguyen
It looks like the final db dump was not executed after pkill milter-greylist. Is there a patch to fix this problem? Thanks, An Nguyen ... From: An.H.Nguyen To:
Thread view
Attachments: 0
2006-12-22 by Fabien Tassin
... me too. look at the archives, I ve mentionned that some months ago, and even more. Look for autoblack. I ve received bad feedbacks from Manu so I planed to
Thread view
Attachments: 0
2006-12-22 by Alan M. Evans
... I can respond to this, since it s a feature that I am very much interested in. In fact, this feature is the reason I subscribed to the group -- been
Thread view
Attachments: 0
2006-12-22 by An.H.Nguyen
dumpfreq 28m actually to worked after the 2nd restart. Is there a way to dump db whenever greylist restarts so I don t have to adjust dumpfreq? Thanks, An
Thread view
Attachments: 0
2006-12-22 by aNguyen
Right now I have to restart milter-greylist every 30 minutes so I set the dumpfreq to 29m. It works fine until greylist.db reached around 350 thousand records.
Thread view
Attachments: 0
2006-12-22 by Emmanuel Dreyfus
... No, this is not supported yet. This is a desirable feature, though. -- Emmanuel Dreyfus manu@netbsd.org
Thread view
Attachments: 0
2006-12-22 by Emmanuel Dreyfus
... Update to the man page are welcome... ... Is milter-greylist of any interst for that? Just forward mail sent to the honneypot address to a program that
Thread view
Attachments: 0
2006-12-22 by Fabien Tassin
... it cannot. 1 refers to the pattern matched (so to a ), not to the pattern to match (not to [^0-9] so neither K nor _ could match). e.g. with perl:
Thread view
Attachments: 0
2006-12-22 by Matt Kettler
... Sorry, you re right. because of the back-reference, the non-digits must all be the same. That said, they can be _anything_ that isn t a digit, and then
Thread view
Attachments: 0
2006-12-22 by reschauzier
... I must be missing something here; how does [0-9]+([^0-9])[0-9]+ 1[0-9]+ 1[0-9]+ pick up 1a4443K23_1 ? (See also http://www.fileformat.info/tool/regex.htm:
Thread view
Attachments: 0
2006-12-22 by reschauzier
... sure ... Let s clarify with an example. 123456 is a valid hex number. From the looks of it, however, there is no way to tell whether this is just a 6 digit
Thread view
Attachments: 0
2006-12-22 by Matt Kettler
... True, the back reference will also pick up: 1a4443K23_1 Which may or may not be desirable. IMHO, the extra overhead of using the back-references isn t
Thread view
Attachments: 0
2006-12-22 by Techwolf
Is this a valid/working config option? # Give this a try if you enabled DNSRBL dnsrbl SORBS DUN dnsbl.sorbs.net 127.0.0.10 # And here is the access list acl
Thread view
Attachments: 0
2006-12-22 by c.r.p.
... Which is why I m interested in a man page that spells out that blacklist does not do DISCARDing , and that it does not populate a table so that
Thread view
Attachments: 0
2006-12-22 by Oliver Fromme
... Is it? $ host web307045.mail.mud.yahoo.com Host web307045.mail.mud.yahoo.com not found: 3(NXDOMAIN) I m also not too worried about greylisting Yahoo, but
Thread view
Attachments: 0
2006-12-22 by reschauzier
... Good point, thank you! ... Unfortunately, it will also match web307045.mail.mud.yahoo.com, which is a very valid mailer. In order to reliably detect hex
Thread view
Attachments: 0
2006-12-22 by robert_schmidli
... Duh. I didn t have extendedregex on. I have got these regexes now: /[0-9]+([^0-9])[0-9]+ 1[0-9]+ 1[0-9]+/
Thread view
Attachments: 0
2006-12-22 by reschauzier
... Make sure you put the extendedregex line _before_ the lines defining the regular expressions. It turns out the extendedregex keyword is location sensitive,
Thread view
Attachments: 0
2006-12-22 by attila.bruncsak@itu.int
... That might be something to do with the local regexp library, since I am sure you did not forget the switch on the extendedregex option. Bests, Attila
Thread view
Attachments: 0
2006-12-22 by Oliver Fromme
... I think the correct question to ask would be: What OS are you running? :-) Milter-greylist uses the regex functions from the libc of the OS. So if those
Thread view
Attachments: 0
2006-12-22 by Emmanuel Dreyfus
... regex code has not changed since 2.0 beta3: 21 months ago. -- Emmanuel Dreyfus manu@netbsd.org
Thread view
Attachments: 0
2006-12-22 by robert_schmidli
... I m running 3.0 on gentoo linux.
Thread view
Attachments: 0
2006-12-22 by reschauzier
... -, so it ... involving more ... will match ... The reason for the backreferences is names like 123x45x67x89, which do occur. At the same time, I don t want
Thread view
Attachments: 0