Milter-greylist

I like the per acl conf option on adjusting delay using DNSRBL, however,
I am not an expert because I don't use them personally due to false
positves and prefer them for score weighting, like spamassassan.

Sence i've never messed with them other then recientelly in greylist
here, I like to see more examples using different RBLs.

Right now, the few spams that is getting through on the server I take
care of, they all have positives hits on RBL in the spamassasan headers.
I like add a few more RBL to add delay of 24h instead of default 30m.

The DOCs cause also be better by explaning it better and some more
examples to help explain how its really done. This is so one could add
obsure RBLs that don't have examples for them.

--Techwolf

Techwolf wrote:
> I like the per acl conf option on adjusting delay using DNSRBL, however,
> I am not an expert because I don't use them personally due to false
> positves and prefer them for score weighting, like spamassassan.
>
> Sence i've never messed with them other then recientelly in greylist
> here, I like to see more examples using different RBLs.
>
> Right now, the few spams that is getting through on the server I take
> care of, they all have positives hits on RBL in the spamassasan headers.
> I like add a few more RBL to add delay of 24h instead of default 30m.
>
> The DOCs cause also be better by explaning it better and some more
> examples to help explain how its really done. This is so one could add
> obsure RBLs that don't have examples for them.
>
> --Techwolf
>   
After looking at the README another time, I figured it out. Turns out
"a.b.c.d" is a _number_, not text. So,

# if IP a.b.c.d is positive, then nslookup of d.c.b.a.dnsbl.sorbs.net 
# returns 127.0.0.10
dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10

Could be better explained:

# if IP number 1.2.3.4 is positive, then nslookup of "4.3.2.1.dnsbl.sorbs.net" 
# returns 127.0.0.10
dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10
acl greylist dnsrbl "SORBS DUN"

Then looking at the http://www.spamhaus.org/zen/index.lasso project, I came up with:

dnsrbl "spamhaus" zen.spamhaus.org 127.0.0.2
acl greylist dnsrbl "spamhaus" delay 24h autowhite 3d

--Techwolf

Techwolf wrote:
> Then looking at the http://www.spamhaus.org/zen/index.lasso project, I came up with:
> 
> dnsrbl "spamhaus" zen.spamhaus.org 127.0.0.2
> acl greylist dnsrbl "spamhaus" delay 24h autowhite 3d
> 
> --Techwolf

I wouldn't bother using zen.spamhaus.org for greylisting - use it to 
block at the MTA level instead.  It's that good.

Phil