Milter-greylist

Hey -

Is there a good way to check to see how many messages which were delayed by 
milter-greylist which never retried?

I tried counting all instances of "Greylisting in action" from 
/var/log/maillog and then all instances of "X-Greylist" but the figures were 
not what I expected.  I thought there would be more greylist delays then 
accepted messages but I think because I'm on so many really high volume 
mailing lists that wasn't a good idea.

I'm sure there's a fairly simple way to script it but I'm drawing a blank.

Thanks!
Thomas

At 01:59 PM 2/19/05, you wrote:

>Hey -
>
>Is there a good way to check to see how many messages which were delayed by 
>milter-greylist which never retried?
>
>I tried counting all instances of "Greylisting in action" from 
>/var/log/maillog and then all instances of "X-Greylist" but the figures were 
>not what I expected.  I thought there would be more greylist delays then 
>accepted messages but I think because I'm on so many really high volume 
>mailing lists that wasn't a good idea.
>
>I'm sure there's a fairly simple way to script it but I'm drawing a blank.

  I wrote a crude program to parse our sendmail logs each morning after they
get rotated.  It builds a linked list of each instance of "milter-greylist" that
is also "delayed for", then removes all the entries that later have a
"milter-greylist" and "autowhitelisted for".  The fields saved for each entry
are the from, addr and rcpt.  It doesn't catch everything, for example it
will fail to notice an entry that got greylisted just before the log was
rotated and whitelisted after, and it's falsely reporting filtered email
when the whitelisting the comes along later is a slightly different address,
but it does give a good rough idea how the filter is operating.

  You're on the right track, at least from what I've found in my own experiments.

--- "Brian W. Antoine" <briana@...>
wrote:

> At 01:59 PM 2/19/05, you wrote:
> 
> >Hey -
> >
> >Is there a good way to check to see how many
> messages which were delayed by 
> >milter-greylist which never retried?
> >
> >I tried counting all instances of "Greylisting in
> action" from 
> >/var/log/maillog and then all instances of
> "X-Greylist" but the figures were 
> >not what I expected.  I thought there would be more
> greylist delays then 
> >accepted messages but I think because I'm on so
> many really high volume 
> >mailing lists that wasn't a good idea.
> >
> >I'm sure there's a fairly simple way to script it
> but I'm drawing a blank.
> 
>   I wrote a crude program to parse our sendmail logs
> each morning after they
> get rotated.  It builds a linked list of each
> instance of "milter-greylist" that
> is also "delayed for", then removes all the entries
> that later have a
> "milter-greylist" and "autowhitelisted for".  The
> fields saved for each entry
> are the from, addr and rcpt.  It doesn't catch
> everything, for example it
> will fail to notice an entry that got greylisted
> just before the log was
> rotated and whitelisted after, and it's falsely
> reporting filtered email
> when the whitelisting the comes along later is a
> slightly different address,
> but it does give a good rough idea how the filter is
> operating.
> 
>   You're on the right track, at least from what I've
> found in my own experiments.
> 

Hi,

Could you let us share your nice code?  Thanks!

Harvey



		
__________________________________ 
Do you Yahoo!? 
The all-new My Yahoo! - Get yours free! 
http://my.yahoo.com