Milter-greylist

Hi!

I have the user database in sendmail`s aliases. So, without
milter-greylist, sendmail refuses mails destinated to unknown users as
expected.

But if milter-greylist is running, milter-greylist add a new line to
greylist.db file whithout checking if the destination user exists or
not. So, my greylist.db file is growing up due to innecesaries entrys .
Actually, 80% of entrys in greylist.db are related to unknown users.

I would like sendmail to check if the destination user exists before
checking milter-greylist. Is it possible?

Thanks in advance,

Jorge

On Fri, Feb 23, 2007 at 11:20:19AM +0100, Jorge Revuelta wrote:
> I would like sendmail to check if the destination user exists before
> checking milter-greylist. Is it possible?

I don't know if it's possible, but I solve this the other way around: 
my greylist.conf contains the list of valid recipients, and milter-greylist
tells sendmail to reject unexisting users.

-- 
Emmanuel Dreyfus
manu@...

OK,

But the problem is my aliases file has 130.000 entryes, and I think it
would be very dificult to manage. 

What is better (memory and cpu)?
1.000.000 entrys in greylist.db + greylist.conf
200.000 entryes in greylist.db + greylist.conf with 130.000 acls for
aliases.

Jorge  

El vie, 23-02-2007 a las 10:25 +0000, Emmanuel Dreyfus escribi�:

> On Fri, Feb 23, 2007 at 11:20:19AM +0100, Jorge Revuelta wrote:
> > I would like sendmail to check if the destination user exists before
> > checking milter-greylist. Is it possible?
> 
> I don't know if it's possible, but I solve this the other way around: 
> my greylist.conf contains the list of valid recipients, and
> milter-greylist
> tells sendmail to reject unexisting users.
> 
> -- 
> Emmanuel Dreyfus
> manu@...
> 
> 
> 
>

Hi!

I have tried your solution and works fine:

acl greylist rcpt alias1@domain
acl greylist rcpt alias2@domain
acl greylist rcpt alias3@domain
acl greylist rcpt alias4@domain
....
acl greylist rcpt aliasN@domain
acl blacklist rcpt /.*/

But I get in logs this message:

Feb 23 12:35:41 machine sendmail[28920]: [ID 801593 mail.info]
l1NBZGV0028920: milter=greylist, action=rcpt, reject=551 5.7.1 Go away!
Feb 23 12:35:41 machine sendmail[28920]: [ID 801593 mail.info]
l1NBZGV0028920: Milter: to=sobaco@..., reject=551 5.7.1 Go away!

Can I change "Go away!" and put, for example, "Unknown user" ? How?

Jorge


El vie, 23-02-2007 a las 10:25 +0000, Emmanuel Dreyfus escribi�:

> On Fri, Feb 23, 2007 at 11:20:19AM +0100, Jorge Revuelta wrote:
> > I would like sendmail to check if the destination user exists before
> > checking milter-greylist. Is it possible?
> 
> I don't know if it's possible, but I solve this the other way around: 
> my greylist.conf contains the list of valid recipients, and
> milter-greylist
> tells sendmail to reject unexisting users.
> 
> -- 
> Emmanuel Dreyfus
> manu@...
> 
> 
> 
>

On Fri, Feb 23, 2007 at 01:38:33PM +0100, Jorge Revuelta wrote:
> I have tried your solution and works fine:
> 
> acl greylist rcpt alias1@domain
> acl greylist rcpt alias2@domain
> acl greylist rcpt alias3@domain
> acl greylist rcpt alias4@domain
> ....
> acl greylist rcpt aliasN@domain
> acl blacklist rcpt /.*/

Simplier:

list "valid-users" rcpt { \
	alias1@domain	\
	alias2@domain	\
	alias3@domain	\
	alias4@domain	\
}

acl greylist list "valid-users"
acl blacklist default

> l1NBZGV0028920: Milter: to=sobaco@..., reject=551 5.7.1 Go away!
> Can I change "Go away!" and put, for example, "Unknown user" ? How?

acl blacklist default msg "Unknown user"

-- 
Emmanuel Dreyfus
manu@...

On Fri, 23 Feb 2007 11:20:19 +0100 Jorge Revuelta <jorge.revuelta@...> wrote:

> I have the user database in sendmail`s aliases. So, without
> milter-greylist, sendmail refuses mails destinated to unknown users as
> expected.
> 
> But if milter-greylist is running, milter-greylist add a new line to
> greylist.db file whithout checking if the destination user exists or
> not. So, my greylist.db file is growing up due to innecesaries entrys .
> Actually, 80% of entrys in greylist.db are related to unknown users.
> 
> I would like sendmail to check if the destination user exists before
> checking milter-greylist. Is it possible?

I don't know, but my Postfix with milter-greylist works like you want -
rejects unknown users and doesn't write them to greylist.db.
I didn't do anything special for this.

Regards,
Nerijus

Jorge Revuelta <jorge.revuelta@...> wrote:

> What is better (memory and cpu)?
> 1.000.000 entrys in greylist.db + greylist.conf
> 200.000 entryes in greylist.db + greylist.conf with 130.000 acls for
> aliases.

Give it a try, you'll tell us...

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

Jorge Revuelta wrote on Fri, 23 Feb 2007 11:20:19 +0100:

> I would like sendmail to check if the destination user exists before
> checking milter-greylist.

I think it works this way if you use feature "check_delay".

Kai

-- 
Kai Sch\ufffdtzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com

On Fri, Feb 23, 2007 at 04:13:38PM +0200, Nerijus Baliunas wrote:
> > I would like sendmail to check if the destination user exists before
> > checking milter-greylist. Is it possible?
> 
> I don't know, but my Postfix with milter-greylist works like you want -
> rejects unknown users and doesn't write them to greylist.db.
> I didn't do anything special for this.

It also works fine with "sendmail" if you have entries in "/etc/mail/access"
or "/etc/mail/virtusertable" which define all valid e-mail addresses. It does
however not work with "normal local" accounts e.g. an e-mail to an address
like "user@...".

My solution is to generate a list of valid local addresses and aliases
automatically and included in in "/etc/mail/access.db".

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/

I have found the solution to my problem: sendmail 8.14.0. I have try in
my machines and works as I want.

Thanks again.

In sendmail`s homepage: (http://www.sendmail.org/releases/8.14.0.php)


Sendmail, Inc., and the Sendmail Consortium announce the availability of
sendmail 8.14.0 which has two "big" new features:
      * headers are 8 bit "transparent".
      * the milter API has been extended; some of these new features
        are: 
              * New callback xxfi_negotiate() to determine the available
                protocol actions and features of the MTA at runtime and
                also to specify which of these a milter wants to use. 
              * New callback xxfi_data() for the DATA command. 
              * New callback xxfi_unknown() for unknown SMTP commands. 
              * New return code SMFIS_SKIP can be used in the
                xxfi_body() callback to skip over further body chunks
                and directly advance to the xxfi_eom() callback. 
              * A MILTER CAN BE INFORMED ABOUT REJECTED RECIPIENTS TOO.
                <----
              * A milter can now specify itself the list of macros it
                wants to receive from the MTA.


El lun, 26-02-2007 a las 13:09 +0000, Matthias Scheler escribi�:

> t also works fine with "sendmail" if you have entries in
> "/etc/mail/access"
> or "/etc/mail/virtusertable" which define all valid e-mail addresses.
> It does
> however not work with "normal local" accounts e.g. an e-mail to an
> address
> like "user@...".
> 
> My solution is to generate a list of valid local addresses and aliases
> automatically and included in in "/etc/mail/access.db".

I have found the solution for my problem: sendmail 8.14.0. I have tryed in
my machines and works as I want.

Thanks again.

In sendmail`s homepage: (http://www.sendmail.org/releases/8.14.0.php)


Sendmail, Inc., and the Sendmail Consortium announce the availability of
sendmail 8.14.0 which has two "big" new features:
      * headers are 8 bit "transparent".
      * the milter API has been extended; some of these new features
        are: 
              * New callback xxfi_negotiate() to determine the available
                protocol actions and features of the MTA at runtime and
                also to specify which of these a milter wants to use. 
              * New callback xxfi_data() for the DATA command. 
              * New callback xxfi_unknown() for unknown SMTP commands. 
              * New return code SMFIS_SKIP can be used in the
                xxfi_body() callback to skip over further body chunks
                and directly advance to the xxfi_eom() callback. 
              * A MILTER CAN BE INFORMED ABOUT REJECTED RECIPIENTS TOO.
                <----
              * A milter can now specify itself the list of macros it
                wants to receive from the MTA.


El lun, 26-02-2007 a las 13:09 +0000, Matthias Scheler escribi�:

> t also works fine with "sendmail" if you have entries in
> "/etc/mail/access"
> or "/etc/mail/virtusertable" which define all valid e-mail addresses.
> It does
> however not work with "normal local" accounts e.g. an e-mail to an
> address
> like "user@...".
> 
> My solution is to generate a list of valid local addresses and aliases
> automatically and included in in "/etc/mail/access.db".