Hi Emmanuel, ... I'm quite new to DKIM so since emailing here did the following: * went to www.dkim.org to read up on DKIM * downloaded the dkim-milter from...
4539
manu@...
Aug 19, 2008 8:52 am
... To which we need to add at least the "none" state (no DKIM header), and perhaps "bogus" if the library returns an error. And we would have such a clause: ...
4540
manu@...
Aug 20, 2008 2:56 am
Just in case someone tries to get a reply from me without that dates, I'll be away from keyboards 23/8 to 30/8 -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz ...
4541
manu@...
Aug 20, 2008 3:46 am
Moving a bit furhter... dkim-milter comes with a library (libdkim), which seems a good candidate for usage in milter-greylist. We start by calling once...
4542
manu@...
Aug 21, 2008 1:33 pm
... Ok, so it's time to help. Please checkout latest milter-greylist from CVS, and configure with --with-openssl and --with-dkim --with-openssl must point to...
4543
manu@...
Aug 22, 2008 2:30 pm
Here is 4.0 plus a few pull-ups for bug fixes. No new features here, this is just a release candidate for a maintenance release. Please provide feedback: is it...
4544
Matthias Scheler
tron@...
Aug 24, 2008 11:17 am
... It seems to work fine under NetBSD/i386 4.0_STABLE. But it hasn't been running on my mail server for a long time yet. Kind regards -- Matthias Scheler...
4545
Kevin Collins
kevcol
Aug 24, 2008 7:34 pm
Hi- I made a tpyo in my greylist.conf file awhile back when making a change, which caused it to ignore the whole file and use default values for everything. I...
4546
Ondrej Valousek
ondrej_v0
Aug 25, 2008 6:51 am
One question: How would I allow mails from a certain domain (typically yahoo.com) to skip the racl greylisting allowing the latter dacl processing? Thanks, ...
well, since we now have support for everything else (dnsbl, spf, dkim), why not add p0f support (os fingerprinting) to selectively greylist against....
4551
manu@...
Aug 31, 2008 3:36 pm
... Heavily greylisting windows XP boxen could be a major benefit. How coudl that work? You would like to send probes to the sending SMTP server? It might be...
4552
Patrick Domack
patrickdk77
Aug 31, 2008 4:03 pm
... hmm, that was why I said 'P0f' support, p0f does all that without doing any probes....
4553
manu@...
Aug 31, 2008 4:20 pm
... Nice, but could you investigate and tell us how that works? milter-greylist can gather the current SMTP connexion source and destination IP and ports,...
4554
Patrick Domack
patrickdk77
Aug 31, 2008 4:25 pm
there are two ways people interface to p0f Most use the script that comes with amavis /usr/sbin/p0f -l 'dst port 25' 2>&1 | /usr/sbin/p0f-analyzer 2345 & and...
4555
manu@...
Aug 31, 2008 4:44 pm
... We do not need that: we have source and destination IP and ports. Do you have an URL with detailed documentation about this internal method? -- Emmanuel...
4556
Patrick Domack
patrickdk77
Aug 31, 2008 5:09 pm
... Ok, the point of using udp was for spamass/amavis running on a different machine could get that same data (unless we place a header in the email with this...
4557
Oliver Fromme
olli@...
Aug 31, 2008 6:44 pm
... The important question is: How reliable is it? How likely is it to get false positives? It should be pointed out that tools like nmap (and similar) just...
4558
Patrick Domack
patrickdk77
Aug 31, 2008 6:52 pm
Well isn't that like anything. Nothing is ever going be reliable, in greylisting triplites aren't even very accurate cause of firewalls, server pools that can...
4559
Oliver Fromme
olli@...
Aug 31, 2008 7:30 pm
... Right. Sadly. There was a time (before spam existed, and before anybody would even consider running MTAs on Windows) when e-mail delivery in the internet...
4560
Patrick Domack
patrickdk77
Aug 31, 2008 7:41 pm
... I agree, but there has been a milter_p0f for awhile, and I would much perfer to just modify greylisting based of fingerprinting results, than blacklist...
4561
manu@...
Aug 31, 2008 8:35 pm
... Well, this would just be another ACL clause. One can experiment random setups with it. The worst thing that can happen if this is used for heavy...
4562
nicolapedrozzi
Sep 3, 2008 4:36 pm
Hello everybody, I just installed milter-greylist (easy, thanks for the good doc). But, I have a problem (I think): The MX record for my server, say...
4563
Brian W. Antoine
unikyrn
Sep 3, 2008 5:05 pm
... Your ISP has already accepted delivery of the messages, you are now stuck with them. Your implementing greylisting just delays delivery of the messages...
4564
manu@...
Sep 3, 2008 5:10 pm
I had no feedback about the DKIM code added in CVS. I cannot beleive it is perfect and there is nothing to tell about it... So, anyone tested it? -- Emmanuel...
4565
manu@...
Sep 3, 2008 5:10 pm
... If you want to implement greylisting, then only machines running milter-greylist should be listed as MX for the domain. -- Emmanuel Dreyfus ...
4566
Ondrej Valousek
ondrej_v0
Sep 4, 2008 7:06 am
Hi Emmanuel, I will test it when I have some more time. Please stay tuned. Ondrej...
4567
Michael Mansour
micoots
Sep 4, 2008 7:24 am
Hi Emmanuel, ... I will also test this over the weekend. I've been pretty crook the past 7 days (these flu's are getting worse each year) and haven't been able...