2004-12-13 by Ivan F. Martinez
On Mon, 13 Dec 2004 21:34:24 +0100
manu@... wrote:
MO>
MO> Emmanuel Dreyfus <manu@...> wrote:
MO>
MO> > Some questions to be answered by users and contributors, so that
MO> > we get an idea of what we are about to integrate and how:
MO>
MO> And here are my own anwsers:
MO>
MO> > 1) Do we want to use sendmail access DB as a greylist/whitelist
MO> > source?
MO>
MO> Why not, a new feature that cannot harm. But I think there should be
MO> a noaccessdb configuration option to switch it off, like we have for
MO> SPF and SMTP auth.
The option for receiving flags from sendmail, permit many types of
integration, an small system can use it, and large system with custom
things too.
We have here a lot of custom permissions in sendmail rules :
Blocks by HELO String
Blocks by failed reverse DNS
Per user Blocks.
And easily we can extend to pass information to the milter. The m4 file
that I made has rules, that probably will be used only during tests, for
production the rules will be inside our current rules.
MO>
MO> > 2) If we do, do we need the config file to support all the
MO> > features the sendmail access DB has?
MO>
MO> It seems that the sendmail DB will allow very flexible things, and
MO> it will be hard to support all of them in milter-greylist config
MO> file, so that should probably not be a goal.
My current patch is small and permit each person to integration with
local systems, and then we have more time to think about things that we
can implement inside milter.
MO>
MO> > 3) Do we want to merge all whitelisting methods into the new ACL
MO> > mecanism? Example: being able to tell that SPF whitelisting will
MO> > work for user foo but not for user bar, or that sendmail DB
MO> > whitelisting will not apply to /.*@sub\.domain\.net/
MO>
MO> That seems highly desirable, but it seems to me that we can do that
MO> later: no need to delay the access DB support for that.
I have not tested the ACL system,
I'm trying to put the milter in production (without problems for the
users) before checking this.
And in our system the option to use the {greylist} variable to define
the white systems/users can make the migration easy.
In near to 5 days running I have a big reduction of viruses detected by
our AntiVirus system, because the virus don't retry to send the
messages. This is a big prove of advantages of milter-greylist.
And using the access I can also use a 100000 IPs whitelist that I got
from a friend ISP.
--