Milter-greylist

A major commercial e-mail sender started to use "pool" in the MX domain name. 
This has cause me a bit of problem as I extra delay all those cable/dsl boxes 
with "pool" in there name.

The expression /pool.*!company/ does not work. Is there a way to match 
pool.cablebox.com but not pool.company.com? cablebox.com can be anything.

I would whitelist the IP, but they use over 256 SNTP servers and no master 
list on the net for them.

-- 
Techwolf
Techwolf@...
http://www.techwolf.net/index.html
PGP public keys on web site.

On Sun, 1 Jun 2008, Techwolf wrote:

> A major commercial e-mail sender started to use "pool" in the MX domain name.
> This has cause me a bit of problem as I extra delay all those cable/dsl boxes
> with "pool" in there name.
>
> The expression /pool.*!company/ does not work. Is there a way to match
> pool.cablebox.com but not pool.company.com? cablebox.com can be anything.
>
> I would whitelist the IP, but they use over 256 SNTP servers and no master
> list on the net for them.

I think that there may be a simpler way to accomplish your goals.  Would 
something like this work for you?

racl whitelist domain pool.company.com
racl greylist domain /pool.*/



-- 
"Microwave oven?  Whaddya mean, it's a microwave oven?  I've been
watching Channel 4 on the thing for two weeks."

finger://ephemeron.org/bigby
http://www.ephemeron.org/~bigby/
irc://irc.ephemeron.org/#the_pub
news://news.ephemeron.org/alt.lemurs

Bigby Findrake <bigby@...> wrote:

> I think that there may be a simpler way to accomplish your goals.  Would
> something like this work for you?
> 
> racl whitelist domain pool.company.com
> racl greylist domain /pool.*/

If company.com publishes SPF record, then this can be interesting too:
racl whitelist domain company.com spf pass

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

On Sun, Jun 01, 2008 at 12:15:20AM -0400, Techwolf wrote:
> This has cause me a bit of problem as I extra delay all those cable/dsl
> boxes with "pool" in there name.

There is DNSRBL for this purpose:

dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10
racl greylist dnsrbl "SORBS DUN" delay 12h

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/

On Sunday 01 June 2008 03:10:01 pm Bigby Findrake wrote:
> 
>
> I think that there may be a simpler way to accomplish your goals.  Would
> something like this work for you?
>
> racl whitelist domain pool.company.com
> racl greylist domain /pool.*/

Unfortunately, there is no "pass"or "goto" function. Meaning pool.company.com 
will not get more checks. Thats why using two rules won't work. Only one rule 
can match. There is no "goto" command that can bypass the second rule so the 
other checks can be performed. Also, whitelist will bypass all greylisting. I 
still need to do the other checks and greylist accordingly.

-- 
Techwolf
Techwolf@...
http://www.techwolf.net/index.html
PGP public keys on web site.

On Sunday 01 June 2008 03:19:40 pm manu@... wrote:
>
> If company.com publishes SPF record, then this can be interesting too:
> racl whitelist domain company.com spf pass

If only the spammer doesn't list cable/dsl/etc. lines in there record, then I 
can use that. I allready use SPF as one of the last rules before the default 
greylisting to reduce the greylist time.

-- 
Techwolf
Techwolf@...
http://www.techwolf.net/index.html
PGP public keys on web site.

On Monday 02 June 2008 05:01:51 am Matthias Scheler wrote:
>
> dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10
> racl greylist dnsrbl "SORBS DUN" delay 12h
>

Allready got that one. Do they guarantee they have all the IPs listed?

So far, everyone is thinking of stuff that I allready went though. So far, no 
one has answer or try to tackle the problem I am asking. But I have not given 
up yet. :-)

-- 
Techwolf
Techwolf@...
http://www.techwolf.net/index.html
PGP public keys on web site.

Techwolf a \ufffdcrit :
> On Sunday 01 June 2008 03:10:01 pm Bigby Findrake wrote:
>>
>> I think that there may be a simpler way to accomplish your goals.  Would
>> something like this work for you?
>>
>> racl whitelist domain pool.company.com
>> racl greylist domain /pool.*/
> 
> Unfortunately, there is no "pass"or "goto" function. Meaning pool.company.com 
> will not get more checks. 

what about :

	racl greylist domain /pool.*/ not domain pool.company.com

milter-greylist has more power it looks like...

-- 
Ce message a ete verifie par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a ete trouve.

On Tue, Jun 03, 2008 at 09:07:16AM +0200, Benoit Branciard wrote:
> 	racl greylist domain /pool.*/ not domain pool.company.com
> 
> milter-greylist has more power it looks like...

Yes, but we probably need ACL groups. Unfortunately, that feature tends to 
make the ACL impossible to understand.

-- 
Emmanuel Dreyfus
manu@...