From: Robert Felber (no email)
Date: Thu Nov 02 2006 - 02:52:34 EST
On Wed, Nov 01, 2006 at 10:00:55PM +0100, Folkert van Heusden wrote:
> Hi,
>
> I'm using sqlgrey together with postfix.
> Would it be possible to do selective greylisting triggered by an
> rbl-list?
I fail to see the reason behind this. You can do selective greylisting based
on regular expression: either greylist host which have common dns names used
for dynamic clients (such as (cable|pool|dyn|\d.\d\.d\.d)\..*\..* or those
who do NOT match a regex like (smtp|mail|mx).*\..*\..*
If you want to use RBLs which list dynamic clients only then you may use for
instance policyd-weight with following configuration:
file /etc/policyd-weight.conf:
$dnsbl_checks_only = 1;
$MAXDNSBLHITS = 0;
$MAXDNSBLMSG = 'check_greylist';
@dnsbl_score = (
'dynablock.njabl.org', 3.25, 0, 'DYN_NJABL',
'otherdyn.donain.tld', 0, 0, 'OTHER_RBL'
);
In postfix' main.cf you must the configure a restriction class for
'check_greylist' which utilizes sqlgrey or whatever you are using for
greylisting.
However, this approach is very ugly and using regular expression based
greylisting sounds more appropriate.
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
|
|
|