Milter-greylist

Is it possible to get a list of all e-mails that are being held pending 
receipt of the re-send?  Is it possible to OK an e-mail that is being held?

THanks,
Steve Eberhart

Steven Eberhart wrote:
 > Is it possible to get a list of all e-mails that are being held pending 
 > receipt of the re-send?

You mean a copy of the greylist?  It is stored in the data-
base.  It's a plain ASCII file so you can look at it with
more(1) or similar; the location is system-dependant, but
usually it's something like /var/milter-greylist/greylist.db.
It is updated every 10 minutes by default.

 > Is it possible to OK an e-mail that is being held?

That doesn't make sense.  The next time the sending server
tries to submit it, it will be accepted anyway.  Then the
tuple will be added to the whitelist automatically.  So
there's really no need for any manual intervention.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Gesch\ufffdftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht M\ufffdn-
chen, HRB 125758,  Gesch\ufffdftsf\ufffdhrer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

In my experience the term "transparent proxy" is an oxymoron (like jumbo
shrimp).  "Transparent" proxies seem to vary from the distortions of a
funhouse mirror to barely translucent.   I really, really dislike them
when trying to figure out the corrective lenses needed with each of them.
        -- R. Kevin Oberman, Network Engineer

Steven Eberhart wrote:
> Is it possible to get a list of all e-mails that are being held pending 
> receipt of the re-send?  Is it possible to OK an e-mail that is being held?

They are not being held. They were temp failed. If they resend after 
your greylist period, they will succeed.

A record of tuples that have been greylisted in the period that you hold 
the records is in /var/milter-greylist/greylist.db, or wherever you keep 
it if you have changed that. But the mail itself was not accepted and is 
not sitting anywhere on your system.

We will often whitelist an IP address if it is a mail source that we 
need to get that is having trouble with greylisting.


---------------

Chris Hoogendyk

-
   O__  ---- Systems Administrator
  c/ /'_ --- Biology & Geology Departments
 (*) \(*) -- 140 Morrill Science Center
~~~~~~~~~~ - University of Massachusetts, Amherst 

<hoogendyk@...>

--------------- 

Erd\ufffds 4

Hi,

> Steven Eberhart wrote:
>  > Is it possible to get a list of all e-mails that are being held 
> pending  > receipt of the re-send?
> 
> You mean a copy of the greylist?  It is stored in the data-
> base.  It's a plain ASCII file so you can look at it with
> more(1) or similar; the location is system-dependant, but
> usually it's something like /var/milter-greylist/greylist.db.
> It is updated every 10 minutes by default.
> 
>  > Is it possible to OK an e-mail that is being held?
> 
> That doesn't make sense.  The next time the sending server
> tries to submit it, it will be accepted anyway.  Then the
> tuple will be added to the whitelist automatically.  So
> there's really no need for any manual intervention.

What Steve may really be asking, is if a tuplet has already been greylisted
and the delay is in effect, can he then whitelist that tuplet (either via
smtp, ip, from or to) immediately?

I understand why this also won't work, because even if he does make a config
change (and the greylist.conf is reloaded automatically - I think it checks
every minute or so?), the sending smtp server still needs to try again before
the greylist server will detect the tuplet in the whitelist and allow it through.

Regards,

Michael.

> Best regards
>    Oliver

On Wed, Oct 24, 2007 at 01:47:03AM +1000, Michael Mansour wrote:
> I understand why this also won't work, because even if he does make a config
> change (and the greylist.conf is reloaded automatically - I think it checks
> every minute or so?),

It checks on each incoming message.

>the sending smtp server still needs to try again before
> the greylist server will detect the tuplet in the whitelist and allow it through.

I suspect that if you have a whitelist rule that lets the message pass
trhough before the greylist rule is reached, it will work. So the trick 
can be done with a whitelist acl with an urlcheck clause.

In the future, I plan to add a command-line tool for querying or modifying 
the database.

-- 
Emmanuel Dreyfus
manu@...