Re: [milter-greylist] Re: Limiting resident memory usage
2006-11-03 by Matt Kettler
... Agreed. I would bet money that the regex evaluation in the milter is vastly insuperior to the dns resolution stack that the milter is compiled against.
Yahoo Groups archive
Messages
Page 90 of 144 · 7199 messages matched
2006-11-03 by Matt Kettler
... Agreed. I would bet money that the regex evaluation in the milter is vastly insuperior to the dns resolution stack that the milter is compiled against.
2006-11-02 by eclark
Matt, that depends on entirely how greedy the regex in question is, and how efficient one stack is vrs another. I would bet money that the regex evaluation in
2006-11-02 by Matt Kettler
... As a side note, I made a quick test with queryperf of 100 PTR queries to sbl-xbl.spamhaus.org and ran it through time. The records were just incrementing
2006-11-02 by Matt Kettler
... Yes, I know that no CPU is being used during this time. I addressed both time AND real CPU clock cycles. ... I d argue it does load the CPU more than a
2006-11-02 by manu@netbsd.org
... Yes, acl greylist means the matching messages are greylisted. ... I skiped the beta stage due to the lack of feedbacks on the alpha snapshots... --
2006-11-02 by manu@netbsd.org
... That s it: you wait. That means the thread is sleeping and the CPU works somewhere else. Perhaps in another milter-greylist thread, perhaps in another
2006-11-02 by manu@netbsd.org
... I suspect they just build the image on the fly when sending spam. That costs nearly nothing. ... It s easy to scatter the job on several machines... --
2006-11-02 by Matt Kettler
... ... Followup: removing bind-devel didn t help, but it did remove /usr/include/isc/netdb.h and /usr/include/lwres.netdb.h. I was able to make it work
2006-11-02 by Matt Kettler
... ... Wait.. you think the *regex* is too resource intensive, but advocate using RBLs instead? Are you completely out of your MIND???!!! An RBL is a
2006-11-02 by Matt Kettler
... Same effect. ... bind installed to /usr/local/bind/include. However, there are several netdb.h s on my system: /usr/include/bits/netdb.h
2006-11-02 by eclark
Aida, why even bother with greylisting at all then? Every big name, reliable mail filtering appliance on the market uses it in some fashion or another. If you
2006-11-02 by AIDA Shinra
At Thu, 2 Nov 2006 12:45:11 -0500, ... I strongly object you. Your default to greylist approach makes too many false positives. I m sure BBC do not want even
2006-11-02 by Jonathan Perkin
... They are being greylisted. Or am I missing the point? I m hoping milter-greylist doesn t blacklist _anything_ else I m going to have serious issues. I ll
2006-11-02 by AIDA Shinra
At Thu, 02 Nov 2006 11:09:03 -0500, ... 1. What happens if you modify LIBS in Makefile like this: LIBS= -lmilter -lbind -lnsl -pthread 2. Where did BIND
2006-11-02 by eclark
Jon, please refer to Matthias previous email, regarding use of rbls to do greylisting, not blacklisting. Specifically these bits: dnsrbl SORBS DUN
2006-11-02 by AIDA Shinra
At Thu, 2 Nov 2006 15:59:36 +0000, ... Frankly speaking, don t do that just for now because: * The milter-greylist has not been designed for such highly loaded
2006-11-02 by Oliver Fromme
... In order to change even a single pixel, the spammer would have to decompress the image, and then compress it again. That costs quite a bit of CPU
2006-11-02 by Matt Kettler
... Personally, I think this is much more sane than greylisting everything. And you can still create exclusions as appropriate. I do. So where s the insanity
2006-11-02 by manu@netbsd.org
... I have good feedbacks from users of spamassassin OCR plugin... -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2006-11-02 by manu@netbsd.org
... What eclark said. And domain clauses in ACL might help here. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2006-11-02 by manu@netbsd.org
... But it s extremely easy for the spammer to generate a new image each time, with a few changing pixels. That costs nearly nothing. I haven t checked, but I
2006-11-02 by AIDA Shinra
At Thu, 2 Nov 2006 16:07:41 +0100 (CET), ... MD5 can be easily bipassed by making invisible unique changes to images. We need something like DFT or wavelet
2006-11-02 by Matthias Scheler
... I used a rule like that in milter-regex for a while and it generated a lot of false hits for hosts like 87-237-56-54.northerncolo.co.uk or
2006-11-02 by Jonathan Perkin
... ..which would look like..? ... Possibly, but won t that end up doing the same thing? I don t want to block dynamic IPs, just greylist them. ... That is an
2006-11-02 by eclark
No offense, but that is an insane rule. You might want to try either rewriting your rule to be more reasonable, or use one of the varied rbl servers which
2006-11-02 by Chris Hoogendyk
Just a further comment on this. The images are coming through with multiple background and text colors with matching grey levels and lint speckling over them.
2006-11-02 by Matt Kettler
... It s not using libbind.a, it s using the .so version, hence the ldconfig. (see ldd output below) ... Fair enough, fixed. ./configure --enable-dnsrbl
2006-11-02 by aNguyen
I do have libmilter a /usr/lib/libmilter and when I retry, I have this error: ./configure --with-libmilter=/usr/lib/libmilter && make && make install ... bison
2006-11-02 by Jonathan Perkin
Hi, I m trialling milter-greylist on the BBC mail infrastructure, which receives around 1 million emails per day. Recently I added acl greylist domain
2006-11-02 by Michael Menge
Hi, I had only a short look at the docu, but you are right. It uses the SpamAssassin::Util package to get the images from the Mail. Then it calls
2006-11-02 by Oliver Fromme
... The problem is that OCR itself is heavyweight. I ve worked with quite a few OCR systems in the past 15 years, and all of them require a serious amount of
2006-11-02 by Emmanuel Dreyfus
... Correct me if I m wrong, but isn t that spamassassin plug-in written in Perl? -- Emmanuel Dreyfus manu@netbsd.org
2006-11-02 by Michael Menge
Hi, the ocr plugin has to do much work to convert the image to png and then run gocr on the image. but even if you don t want to run SA you could write a
2006-11-02 by Emmanuel Dreyfus
Hello It s a bit off-topic, but I know there are a bunch of mail system experts on this list... I d like to fight better the image spams. The only solution I
2006-11-02 by Matthias Scheler
... I would recomment using milter-greylist 3.0RC6 instead. It is very stable and provides new powerful features. ... Perhaps, but there could be problems. You
2006-11-02 by aNguyen
I am running version milter-greylist-1.6 and want to upgrade... So I download the stable version milter-greylist 2.0.2 and try to compile it... I have never
2006-11-02 by AIDA Shinra
At Wed, 01 Nov 2006 19:32:13 -0500, ... BIND may put headers and libraries at /usr/local/bind/{include,lib} in some situation. Are you sure libbind.a was at
2006-11-02 by eclark
There arent enough details here. How many children? Are you running some sort of observation script like I posted previously? Are you running out of children
2006-11-02 by An.H.Nguyen
milter-greylist process crashes daily on my mail gateways. Here s the error: Milter (greylist): to error state Has anybody have the same problem and know how
2006-11-02 by Matt Kettler
... OK. ... Ok, so I did the following: 1) removed libbind.* from /usr/lib/, leaving them in /usr/local/lib/ where binds build process put them. 2) modified
2006-11-01 by manu@netbsd.org
... Because 313.00.313.20 does not have a reverse DNS, therefore it cannot match your domain clause. If you want to match against the sender e-mail address,
2006-11-01 by Matt Kettler
... Because that whitelist applies to the name of the MACHINE that delivered it. Not the domain name in the mail from command. In this case, I assume you ve
2006-11-01 by Matthias Scheler
... No, I just wasn t sure about the arguments for dnsrbl . Kind regards -- Matthias Scheler http://zhadum.org.uk/
2006-11-01 by c.r.p.
in /etc/mail/greylist.conf # It is also possible to whitelist sender # machines using their DNS names. #acl whitelist domain example.net acl whitelist domain
2006-11-01 by manu@netbsd.org
... Yes, it does. Why do you ask? It does not work? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org
2006-11-01 by Matthias Scheler
Hello, I m trying to use the Spamhaus SBL with milter-greylist (3.0RC6). Does the configuration snippet quoted below look correct? dnsrbl Spamhaus SBL
2006-11-01 by AIDA Shinra
... Is this patch sufficient? I m new to lex/yacc... http://www.j10n.org/files/milter-greylist-3.0rc6-dosfix2.patch
2006-10-30 by Steve Perrault
I hope you get a response for this. I had trouble compiling it as well (gcc 3.2.2), but it was in a later stage... I think it had to do with Solaris 7 not
2006-10-30 by Norbert Klein
Hello ! I compile well the milter with SOLARIS 9 but I have a problem while compiling for SOLARIS7 configure 46 checking for gcc... gcc 47 checking for C
2006-10-29 by AIDA Shinra
At Sun, 29 Oct 2006 16:30:54 +0100, ... Sounds reasonable. In this approach we only need to take care about lex/yacc caveats and non-ASCII characters breaking