Re: Postfix policy servers

On 2004-08-01 Peter Bowyer <[email protected]> wrote:
> I've just been reading about Postfix policy servers - seems to be a
> generic framework for providing access policy to a Postfix MTA given
> various parameters about the connection and the message being
> submitted. It works over a TCP or unix socket with a simple
> interface.
 
> The page I was reading is at http://www.postfix.org/SMTPD_POLICY_README.html
 
> I got there via a posting on SPAM-L about Postgrey, which is an
> implementation of greylisting in the framework described above. That
> implementation is described at http://isg.ee.ethz.ch/tools/postgrey/
> - there's also an SPF policy engine apparently - haven't found that
> yet.

Hello,
I've played a little bit with postgrey. You can *almost* use it in
exim's acls with a
condition = $magic_stringcomparison{$readsocket{...}}

There is just a single problem, the postfix policy servers will not
close the connection after replying to a request, but exim's
$readsocket expects the server to close the connection. Therefore
you'll get connection-timed-out-errors from exim.

So you either have to modify the policy servers or ask Phil to enhance
$readsocket to add an option forcing it to close the connection. I do
not think this should go into exiscan, but into exim proper.
                cu andreas
-- 
"See, I told you they'd listen to Reason," [SPOILER] Svfurlr fnlf,
fuhggvat qbja gur juveyvat tha.
Neal Stephenson in "Snow Crash"