Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Thread

milter-greylist 4.0rc2 is available

milter-greylist 4.0rc2 is available

2007-10-23 by manu@netbsd.org

http://ftp.espci.fr/pub/milter-greylist/milter-greylist-4.0rc2.tgz
MD5 (milter-greylist-4.0rc2.tgz) = e2c1e4fc918d9585348d193c7d05eec7

Changes since 3.0:

4.0rc2
        Fix %E and %R format substitution that sometime returned bogus results
        Report time taken by DNSRBL and urlcheck lookups (Benoit Branciard)
        Document milter timeouts, RPM generation
        Add 4.0 features examples to default greylist.conf
        Update contributor list
4.0rc1
        Accept --disable-dnsrbl without a bug
        Fix message size when multiple messages are sent in one session
        Do not build fd_pool.c if it is not used
4.0b4
        Add missing bits for Solaris 256 stream limitation workaround
        Fix build problem on Solaris
        Documentation fix (Tim Mooney)
4.0b3
        Warn in README that bison may be required for buidling
        Fix configure error on Solaris (Tim Mooney)
        Workaround for Solaris 256 stream limitation (Johann E. Klasek)
        Fix spelling errors (Nerijus Baliunas)
        Restore build for systems like Tru64 where ld does not acccept -R
        Cleanup temporary file after DB dump failure (Johann E. Klasek)
        Handle libc that fails stdio without setting errno (Johann E. Klasek)
        Fixes the usage of the thread-proof resolver library (Johann E. Klasek)
        Do not quit on non fatal errors (Johann E. Klasek)
        Display ACL when matching whitelist ACL (Benoit Branciard)
        Add troubleshooting in README (Rogier Maas)
4.0b2
        Treat protocol errors in urlcheck clauses as temporary failures
        Report missing SPF reasons in X-Greylist (Benoit Branciard)
        Allow building objects outside of source directory (Mattheu Herrb)
        Fix configure LDFLAG generation, -R was missing (Mattheu Herrb)
        Fix MX sync on Solaris (Mattheu Herrb)
4.0b1
        Add checks against libmilter giving us NULL private structure
        Properly reset message filters when handling MAIL FROM after DATA
        Allow rcpt clause in dacl statement, as documented
        Add google pools to default greylist.conf
        Add hooks for libdmalloc
        Improve debug message (Yaroslav Boychuk)
        Improve GeoIP status report in X-Greylist (Hideki ONO)
4.0a6
        Avoid GeoIP reporting "--" for broken domain (Bernhard Schneider )
        Fix run-away string (AIDA Shinra)
        Check for libbind9 if libbind cannot be found (Fabien Tassin)
        Document ACL on TLS DN (Fabien Tassin)
        Avoid spurious exit on DATA stage ACL match for multiple recipients
4.0a5
        Don't use YY_FLUSH_BUFFER, use flush_buffer() instead (AIDA Shinra)
4.0a4
        Fix upgrade pitfal, where write access to the PID file is missing
        Back out a Debian build fix that broke other systems
4.0a3
        Add an urlcheck reply which is ignored: milterGreylistIgnore
        Build fixes for Debian (Bernhard Schneider)
        Add a configure flag to not use --rpath (Bernhard Schneider)
        Cleanup stale PID file on startup (Bernhard Schneider)
        Fix memory leak with DNSRBL (Michael Fromme)
4.0a2
        For urlcheck answer, cope with a trailing line not terminated by CR
        Fix X-Greylist lossage (AIDA Shinra)
        Fix garbled log (Bernhard Schneider)
        Fix build on Tru64 (Attila Bruncsak)
4.0a1
        Fix again an accept-all-bug when built with SPF (AIDA Shinra)
        Fix macro handling in ACL (AIDA Shinra)
        %% syntax in format strings (AIDA Shinra)
        Clarified "%Xm" and "%Xh" semantics (AIDA Shinra)
        Fixed a memory leak at mlfi_eom (AIDA Shinra)
        Fix a bug where doing RCPT twice when blacklised succeed (AIDA Shinra)
3.1.8
        Allow filtering on the HELO string
        Back out previous SPF fix, it caused accept-all with SPF-less builds
3.1.7
        Fix an accept-all-bug when built with SPF (AIDA Shinra)
        Option to perform urlchecks in forked instance to avoid thread-unsafety
        Allow escaping of " in strings and / in regex
        Fix whitelisting using access.db (Georg Horn)
        Fix NULL pointer referencing in urlcheck code
        Fix body storage so that locators (^ and $) work for body regex
        Fix spurious warning about unknown whitelisting conditions
        Fix memory leaks when using urlchecks
        Makes urlcheck properties and values case insensitives
        Do not retain urlcheck properties if the urlcheck clause did not match
        Allow loading regex in lists of body clauses
        Option to clear urlcheck prop before handling a new recipient
        %D format string for getting the list of matching DNSRBL
        Avoid performing multiple DNSRBL checks for the same IP
        Allow reusing in the ACL of properties gathered from urlcheck
        Fix wrong display of %Xc %Xe and %Xh substitutions
        Fix documentation: %Xh instead of %Xr
        stat should not report X-Greylist header is message was rejected
        Fix a documentation bug: sender e-mail is %f, not %s
3.1.6
        More format strings, for SMTP code, extended code, message, header
        Fix a crash when using regex without grouping ()
        Document the CVS location in README
3.1.5
        Fix double free when using content filtering
        ACL clauses can now be negated
        msg clauses in ACL can use format strings substitution
        Add an ACL clause to customize X-Greylist header
        Fix serious bugs in DNSRBL code (Jacques Beigbeder)
        Fix a display bug for netblocks
        Add a time clause to match against time sets
        GeoIP support, through the geoip clause
        Fix warning for Postfix build (Nerijus Baliunas)
        %g for substitution by regex back references
        %I for susbtitution by sender IP masked by a CIDR
        Allow specifying socket mode in config file
        Set default user to root for .spec file
        Do not drop root privs if we do not run as root
3.1.4
        Add support for switching to a given group (Ralf S. Engelschall)
        Add substitutions for sendmail macro and strftime in URL checks
        Add custom logs of milter-greylist actions, see stat in greylist.conf
        Fixes for running with Postfix (Nerijus Baliunas)
        Fix configure problem with DNSRBL on Linux (Andrew McGill)
        Document how to use milter-greylist with Postfix (Nerijus Baliunas)
        Update .spec for Postfix (Nerijus Baliunas)
        Optionnaly post the message body to an URL check at DATA stage
        Integrate SPF, SMTP AUTH and STARTTLS in ACL
        Add msgsize and rcptcount clauses to ACL
        Allow rcpt clause at DATA stage ACL
        Fix crashes when running with -D on some systems (John Thiltges)
        Do not sort the databases, it makes startup slow and buys nothing
3.1.3
        Fix various bugs (regex searches, lists matches, uninitialized memory)
3.1.2
        Fix timespamp on sparc64 (Gert Doering)
        Add the ability to query extrnal sources in ACL using URL
        Add connexion pools for URL queries to enable persistent connexions
        Fix dependency in rc-bsd.sh: it's mail, not sendmail
        Add DATA-stage ACL
        Update to .spec file (Rudy Eschauzier)
        Allow header and body searches in DATA-stage ACL
        Allow CIDR match for DNSRBL
        Allow multiple macro, dnsrbl, urlcheck, body and header clauses in ACL
3.1.1
        Fix crashes during dump reloads (AIDA Shinra)
        Fix DoS in MX sync protocol (AIDA Shinra)
        Check for -lc_r before others, for FreeBSD (AIDA Shinra)
        Fix configure for libspf2 (AIDA Shinra)
        Fix FreeBSD build (AIDA Shinra)
        Avoid buffer overflow in DNSRBL code (AIDA Shinra)
        Fix build problem with newer BerkeleyDB (AIDA Shinra)
        Check if -lbind requires -lpthread, for Linux
        Correctly enable non blocking I/O fox MX sync (Attila Bruncsak)
        Pointer to DRAC documentation (Matthias Scheler)
        FreeBSD build fixes (Hajimu UMEMOTO)
        Remove the /tmp/access-list.debug for security sake (AIDA Shinra)
        Fix display bug in log messages (AIDA Shinra)
        Updated the list of broken MTA
        Fix MX sync between Tru64 and Linux (Attila Bruncsak)
        Silly build fix for platforms that lack vsyslog()
        Honour LINE_MAX for syslog (Attila Bruncsak)
        Warn about ignored ACL lines after acl default rule
        Fix various race conditions (AIDA Shinra)
        Fix big bugs in macro support (AIDA Shinra)
        Fix build warning on Tru64
        Build fix on Solaris
        Documentation fix


-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-23 by Michael Mansour

Hi,

> http://ftp.espci.fr/pub/milter-greylist/milter-greylist-4.0rc2.tgz
> MD5 (milter-greylist-4.0rc2.tgz) = e2c1e4fc918d9585348d193c7d05eec7

I've just downloaded and extracted it, and get plenty of these future
timestamp errors:

.
.
.
tar: milter-greylist-4.0rc2/greylist.conf: time stamp 2007-10-23 21:28:21 is
24273 s in the future
milter-greylist-4.0rc2/greylist.conf.5
tar: milter-greylist-4.0rc2/greylist.conf.5: time stamp 2007-10-23 21:38:51 is
24903 s in the future
milter-greylist-4.0rc2/greylist2.conf
milter-greylist-4.0rc2/install-sh
milter-greylist-4.0rc2/list.c
milter-greylist-4.0rc2/list.h
milter-greylist-4.0rc2/macro.c
milter-greylist-4.0rc2/macro.h
milter-greylist-4.0rc2/milter-greylist.8
tar: milter-greylist-4.0rc2/milter-greylist.8: time stamp 2007-10-23 21:38:51
is 24902 s in the future
milter-greylist-4.0rc2/milter-greylist.c
milter-greylist-4.0rc2/milter-greylist.h
milter-greylist-4.0rc2/milter-greylist.m4
milter-greylist-4.0rc2/milter-greylist.spec
tar: milter-greylist-4.0rc2/milter-greylist.spec: time stamp 2007-10-23
21:40:51 is 25022 s in the future
milter-greylist-4.0rc2/milter-greylist.spec.in
.
.
.

I extract the 4.0rc1, and it extracts fine without those errors.

Are these errors because you're ahead of our time? (+10GMT) ?

Michael.

> Changes since 3.0:
> 
> 4.0rc2
>         Fix %E and %R format substitution that sometime returned 
> bogus results        Report time taken by DNSRBL and urlcheck 
> lookups (Benoit Branciard)        Document milter timeouts, RPM generation
>         Add 4.0 features examples to default greylist.conf
>         Update contributor list
> 4.0rc1
>         Accept --disable-dnsrbl without a bug
>         Fix message size when multiple messages are sent in one session
>         Do not build fd_pool.c if it is not used
> 4.0b4
>         Add missing bits for Solaris 256 stream limitation workaround
>         Fix build problem on Solaris
>         Documentation fix (Tim Mooney)
> 4.0b3
>         Warn in README that bison may be required for buidling
>         Fix configure error on Solaris (Tim Mooney)
>         Workaround for Solaris 256 stream limitation (Johann E. 
> Klasek)        Fix spelling errors (Nerijus Baliunas)        Restore 
> build for systems like Tru64 where ld does not acccept -R        
> Cleanup temporary file after DB dump failure (Johann E. Klasek)      
>   Handle libc that fails stdio without setting errno (Johann E. 
> Klasek)        Fixes the usage of the thread-proof resolver library 
> (Johann E. Klasek)        Do not quit on non fatal errors (Johann E. 
> Klasek)        Display ACL when matching whitelist ACL (Benoit 
> Branciard)        Add troubleshooting in README (Rogier Maas)
> 4.0b2        Treat protocol errors in urlcheck clauses as temporary failures
>         Report missing SPF reasons in X-Greylist (Benoit Branciard)
>         Allow building objects outside of source directory (Mattheu 
> Herrb)        Fix configure LDFLAG generation, -R was missing 
> (Mattheu Herrb)        Fix MX sync on Solaris (Mattheu Herrb)
> 4.0b1        Add checks against libmilter giving us NULL private structure
>         Properly reset message filters when handling MAIL FROM after 
> DATA        Allow rcpt clause in dacl statement, as documented       
>  Add google pools to default greylist.conf        Add hooks for libdmalloc
>         Improve debug message (Yaroslav Boychuk)
>         Improve GeoIP status report in X-Greylist (Hideki ONO)
> 4.0a6
>         Avoid GeoIP reporting "--" for broken domain (Bernhard 
> Schneider )        Fix run-away string (AIDA Shinra)        Check 
> for libbind9 if libbind cannot be found (Fabien Tassin)        
> Document ACL on TLS DN (Fabien Tassin)        Avoid spurious exit on 
> DATA stage ACL match for multiple recipients
> 4.0a5        Don't use YY_FLUSH_BUFFER, use flush_buffer() instead 
> (AIDA Shinra)
> 4.0a4        Fix upgrade pitfal, where write access to the PID file 
> is missing        Back out a Debian build fix that broke other systems
> 4.0a3        Add an urlcheck reply which is ignored: milterGreylistIgnore
>         Build fixes for Debian (Bernhard Schneider)
>         Add a configure flag to not use --rpath (Bernhard Schneider)
>         Cleanup stale PID file on startup (Bernhard Schneider)
>         Fix memory leak with DNSRBL (Michael Fromme)
> 4.0a2
>         For urlcheck answer, cope with a trailing line not 
> terminated by CR        Fix X-Greylist lossage (AIDA Shinra)       
>  Fix garbled log (Bernhard Schneider)        Fix build on Tru64 
> (Attila Bruncsak)
> 4.0a1        Fix again an accept-all-bug when built with SPF (AIDA 
> Shinra)        Fix macro handling in ACL (AIDA Shinra)        %% 
> syntax in format strings (AIDA Shinra)        Clarified "%Xm" and 
> "%Xh" semantics (AIDA Shinra)        Fixed a memory leak at mlfi_eom 
> (AIDA Shinra)        Fix a bug where doing RCPT twice when 
> blacklised succeed (AIDA Shinra)
> 3.1.8        Allow filtering on the HELO string        Back out 
> previous SPF fix, it caused accept-all with SPF-less builds
> 3.1.7        Fix an accept-all-bug when built with SPF (AIDA Shinra) 
>        Option to perform urlchecks in forked instance to avoid 
> thread-unsafety        Allow escaping of " in strings and / in regex 
>        Fix whitelisting using access.db (Georg Horn)        Fix NULL 
> pointer referencing in urlcheck code        Fix body storage so that 
> locators (^ and $) work for body regex        Fix spurious warning 
> about unknown whitelisting conditions        Fix memory leaks when 
> using urlchecks        Makes urlcheck properties and values case insensitives
>         Do not retain urlcheck properties if the urlcheck clause did 
> not match        Allow loading regex in lists of body clauses        
> Option to clear urlcheck prop before handling a new recipient        
> %D format string for getting the list of matching DNSRBL       
>  Avoid performing multiple DNSRBL checks for the same IP       
>  Allow reusing in the ACL of properties gathered from urlcheck       
>  Fix wrong display of %Xc %Xe and %Xh substitutions        Fix 
> documentation: %Xh instead of %Xr        stat should not report X-
> Greylist header is message was rejected        Fix a documentation 
> bug: sender e-mail is %f, not %s
> 3.1.6        More format strings, for SMTP code, extended code,
>  message, header        Fix a crash when using regex without 
> grouping ()        Document the CVS location in README
> 3.1.5        Fix double free when using content filtering        ACL 
> clauses can now be negated        msg clauses in ACL can use format 
> strings substitution        Add an ACL clause to customize X-
> Greylist header        Fix serious bugs in DNSRBL code (Jacques 
> Beigbeder)        Fix a display bug for netblocks        Add a time 
> clause to match against time sets        GeoIP support, through the 
> geoip clause        Fix warning for Postfix build (Nerijus Baliunas) 
>        %g for substitution by regex back references        %I for 
> susbtitution by sender IP masked by a CIDR        Allow specifying 
> socket mode in config file        Set default user to root for .spec 
> file        Do not drop root privs if we do not run as root
> 3.1.4        Add support for switching to a given group (Ralf S. 
> Engelschall)        Add substitutions for sendmail macro and 
> strftime in URL checks        Add custom logs of milter-greylist 
> actions, see stat in greylist.conf        Fixes for running with 
> Postfix (Nerijus Baliunas)        Fix configure problem with DNSRBL 
> on Linux (Andrew McGill)        Document how to use milter-greylist 
> with Postfix (Nerijus Baliunas)        Update .spec for Postfix 
> (Nerijus Baliunas)        Optionnaly post the message body to an URL 
> check at DATA stage        Integrate SPF, SMTP AUTH and STARTTLS in ACL
>         Add msgsize and rcptcount clauses to ACL
>         Allow rcpt clause at DATA stage ACL
>         Fix crashes when running with -D on some systems (John 
> Thiltges)        Do not sort the databases, it makes startup slow 
> and buys nothing
> 3.1.3        Fix various bugs (regex searches, lists matches,
>  uninitialized memory)
> 3.1.2        Fix timespamp on sparc64 (Gert Doering)        Add the 
> ability to query extrnal sources in ACL using URL        Add 
> connexion pools for URL queries to enable persistent connexions      
>   Fix dependency in rc-bsd.sh: it's mail, not sendmail        Add 
> DATA-stage ACL        Update to .spec file (Rudy Eschauzier)       
>  Allow header and body searches in DATA-stage ACL        Allow CIDR 
> match for DNSRBL        Allow multiple macro, dnsrbl, urlcheck, body 
> and header clauses in ACL
> 3.1.1        Fix crashes during dump reloads (AIDA Shinra)       
>  Fix DoS in MX sync protocol (AIDA Shinra)        Check for -lc_r 
> before others, for FreeBSD (AIDA Shinra)        Fix configure for 
> libspf2 (AIDA Shinra)        Fix FreeBSD build (AIDA Shinra)       
>  Avoid buffer overflow in DNSRBL code (AIDA Shinra)        Fix build 
> problem with newer BerkeleyDB (AIDA Shinra)        Check if -lbind 
> requires -lpthread, for Linux        Correctly enable non blocking 
> I/O fox MX sync (Attila Bruncsak)        Pointer to DRAC 
> documentation (Matthias Scheler)        FreeBSD build fixes (Hajimu 
> UMEMOTO)        Remove the /tmp/access-list.debug for security sake 
> (AIDA Shinra)        Fix display bug in log messages (AIDA Shinra)   
>      Updated the list of broken MTA        Fix MX sync between Tru64 
> and Linux (Attila Bruncsak)        Silly build fix for platforms 
> that lack vsyslog()        Honour LINE_MAX for syslog (Attila 
> Bruncsak)        Warn about ignored ACL lines after acl default rule 
>        Fix various race conditions (AIDA Shinra)        Fix big bugs 
> in macro support (AIDA Shinra)        Fix build warning on Tru64     
>    Build fix on Solaris        Documentation fix
> 
> -- 
> Emmanuel Dreyfus
> http://hcpnet.free.fr/pubz
> manu@...
------- End of Original Message -------

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-23 by Emmanuel Dreyfus

On Tue, Oct 23, 2007 at 02:46:51PM +1000, Michael Mansour wrote:
> tar: milter-greylist-4.0rc2/greylist.conf: time stamp 2007-10-23 21:28:21 is
> 24273 s in the future

Hmm, it seems I have a clock skew... Fortunately the problem will be fixed
in a few hours :-)

-- 
Emmanuel Dreyfus
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-23 by Michael Mansour

Hi Emmanuel,

> On Tue, Oct 23, 2007 at 02:46:51PM +1000, Michael Mansour wrote:
> > tar: milter-greylist-4.0rc2/greylist.conf: time stamp 2007-10-23 21:28:21 is
> > 24273 s in the future
> 
> Hmm, it seems I have a clock skew... Fortunately the problem will be 
> fixed in a few hours :-)

:) is it a problem if I use / build an RPM package if it's source is clock
skewed like this?

Although I've just gone through the 4.0rc1 RPM build on 4 servers, I don't
mind doing this again for the 4.0rc2 build but just don't want problems as
these are production servers.

Do you use ntp or another time sync system on your machine?

Michael.

> -- 
> Emmanuel Dreyfus
> manu@...
------- End of Original Message -------

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-23 by shuttlebox

On 10/23/07, Michael Mansour <mic@...> wrote:
>  :) is it a problem if I use / build an RPM package if it's source is clock
>  skewed like this?
>
>  Although I've just gone through the 4.0rc1 RPM build on 4 servers, I don't
>  mind doing this again for the 4.0rc2 build but just don't want problems as
>  these are production servers.

It's tar that complains about timestamps in the future, it doesn't
even affect what tar does so nothing bad will happen to your packages.
:-)

-- 
/peter

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-23 by Emmanuel Dreyfus

On Tue, Oct 23, 2007 at 09:40:40PM +1000, Michael Mansour wrote:
> :) is it a problem if I use / build an RPM package if it's source is clock
> skewed like this?

I don't know, but you just have to wait 6 hours and the problem will
go away by itself.

> Do you use ntp or another time sync system on your machine?

I do, but I suspect ntpd crashed. I'll check when I'll be back home
this evening.

-- 
Emmanuel Dreyfus
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-29 by shuttlebox

On 10/23/07, manu@... <manu@...> wrote:
> http://ftp.espci.fr/pub/milter-greylist/milter-greylist-4.0rc2.tgz
>  MD5 (milter-greylist-4.0rc2.tgz) = e2c1e4fc918d9585348d193c7d05eec7

I have been running 4.0b4 for almost three weeks with no problems and
4.0rc2 since before the weekend, also with no problems. No crashes and
mx syncing works. I use Solaris 10 on Sparc.

-- 
/peter

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-29 by Emmanuel Dreyfus

On Mon, Oct 29, 2007 at 09:56:15AM +0100, shuttlebox wrote:
> I have been running 4.0b4 for almost three weeks with no problems and
> 4.0rc2 since before the weekend, also with no problems. No crashes and
> mx syncing works. I use Solaris 10 on Sparc.

Thank you for the report.

I suspect it's high time for releasing 4.0.

-- 
Emmanuel Dreyfus
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-29 by Michael Mansour

Hi Emmanuel,

> On Mon, Oct 29, 2007 at 09:56:15AM +0100, shuttlebox wrote:
> > I have been running 4.0b4 for almost three weeks with no problems and
> > 4.0rc2 since before the weekend, also with no problems. No crashes and
> > mx syncing works. I use Solaris 10 on Sparc.
> 
> Thank you for the report.
> 
> I suspect it's high time for releasing 4.0.

I also haven't had any dramas with the 4.0rc2 version.

One thing I'd like to suggest though, as I want to integrate milter-greylist
with MailWatch eventually, is support for "include" statements in greylist.conf.

The way this would work would be to have something like:

include milter-greylist-whitelist.conf

where milter-greylist-whitelist.conf could also exist in /etc/mail, and be
included into the main "read" of greylist.conf

Why this would be good for me, would be because I can use a mysql query to
pull out the whitelist information from MailWatch, then make a script which
would format that whitelist into the form that milter-greylist could use
(output into the milter-greylist-whitelist.conf file).

The benefit to my MailWatch users means they continue to use the
whitelist/blacklist features of MailWatch (web interface etc) while
milter-greylist then uses the whitelist/blacklist configured from there.

For the blacklist I could have milter-greylist-blacklist.conf which would be
taken a blacklist senders and recipients.

If you have other ideas of how this can be done please let me know.

Michael.

> -- 
> Emmanuel Dreyfus
> manu@...
------- End of Original Message -------

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-29 by manu@netbsd.org

Michael Mansour <mic@...> wrote:

> If you have other ideas of how this can be done please let me know.

An include statement would be an interesting feature indeed. OTOH, the
ability to query a database directly might be even more interesting.

You'll have to wait for the next release for new features. 4.0 is at
release candidate stage, which means we will only fix serious bugs now.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-30 by Michael Mansour

Hi Emmanuel,

> Michael Mansour <mic@...> wrote:
> 
> > If you have other ideas of how this can be done please let me know.
> 
> An include statement would be an interesting feature indeed. OTOH, 

Yes, as a caveat the person would need to get used to running "milter-greylist
-cf" or script it with an errorlevel 0 response before actually applying the
update.

I synchronise the greylist.conf file on four servers when I change it on one.

> the ability to query a database directly might be even more interesting.

Even better actually. I use MailWatch which provides the database and web
interface to MailScanner, which does all the hard work of scanning and
filtering mail.

Pulling (or reading) information from the MailWatch database is very easy. The
way it's done in MailScanner is by giving it a call to a couple of perl
modules via the MailScanner.conf:

Is Definitely Not Spam = &SQLWhitelist
Is Definitely Spam = &SQLBlacklist

where the "&" symbol defines the use of a "custom function", where all custom
functions reside:

/usr/lib/MailScanner/MailScanner/CustomFunctions/SQLBlackWhiteList.pm

The Custom Functions don't need the setup of config for the SQL username,
password etc since they get MailScanner to provide that information.

> You'll have to wait for the next release for new features. 4.0 is at
> release candidate stage, which means we will only fix serious bugs now.

Yes that's fine, I'd expect a lot of work would go into such functionality and
it would likely take months, but this type of functionality will allow
thousands of MailWatch admins, where many use milter-greylist, to provide more
functionality (and ease of use) for their users.

I already display the Greylist delays logged by milter-greylist in the
MailWatch interface on each message, where users can see the delays and then
drill down to the message headers and content. A howto has been provided on
the mailscanner wiki for how to integrate milter-greylist delays into MailWatch.

Regards,

Michael.

> -- 
> Emmanuel Dreyfus
> http://hcpnet.free.fr/pubz
> manu@...
------- End of Original Message -------

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-30 by manu@netbsd.org

Michael Mansour <mic@...> wrote:

> Even better actually. I use MailWatch which provides the database and web
> interface to MailScanner, which does all the hard work of scanning and
> filtering mail.

You have a web front-end that queries your database? You might want to
give a try at the urlcheck keyword in milter-greylist ACL.

I use it to dynamically pull config from a LDAP directory, but it can
use any URL supported by libcurl.
-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

Re: [milter-greylist] milter-greylist 4.0rc2 is available

2007-10-30 by Johann E. Klasek

On Mon, Oct 29, 2007 at 09:56:15AM +0100, shuttlebox wrote:
> On 10/23/07, manu@... <manu@...> wrote:
> > http://ftp.espci.fr/pub/milter-greylist/milter-greylist-4.0rc2.tgz
> >  MD5 (milter-greylist-4.0rc2.tgz) = e2c1e4fc918d9585348d193c7d05eec7
> 
> I have been running 4.0b4 for almost three weeks with no problems and
> 4.0rc2 since before the weekend, also with no problems. No crashes and
> mx syncing works. I use Solaris 10 on Sparc.


4.0rc2 works fine also on Solaris 9 x86 (32bit) and enabled stdio-hack
(USE_FD_POOL) in MX-sync configuration with an Linux x86_64 system based
on 4.0rc1. Both are configured with dnsrbl and libspf2.

Just to leave a note about libspf2: the latest version 1.2.5 needs some
patches, especially for 64-bit environments, otherwise milter-greylist
seg-faults ...

On Solaris systems configure produces warnings regarding missing
prototypes for some multi-threading libarary functions (eg. strtok_r).
Configure should find out the correct CFLAG needed for (at least)
Solaris environments. GCC needs "-ptreads", Sun Studio CC nees "-mt".
Emmanuel will take this into account after the stable 4.0 release. But
never mind, the program compiles and links anyway.

Patches for libspf2, notes for building milter-greylist on Solaris and
Linux can be found at

http://jk.kom.tuwien.ac.at/Software/milter-greylist/


Johann

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.