Re: rcptcheck before greylist
Hugo Monteiro <[email protected]>
| Newsgroups | gmane.mail.qmail.ldap |
|---|---|
| Message-ID | <[email protected]> |
On 05/11/2010 12:22 PM, Szabo Nandor wrote: > >>> I'm using Hugo Monteiro's envelope-scan patch with Policyd support >>> (with great success). >>> RCPTCHECK is set in qmail-smtpd, but greylisting is executed before >>> rcptcheck. >>> A lot of unauth triplet is fill mysql table, anyhow this mail will >>> be drop by rcpt checking. >>> Is it possible to execute RCPTCHEKC before envelope scan? >>> My tcp.smtp file: >>> =:allow,RCPTCHECK="",SMTPAUTH="",QMAILQUEUE="/var/qmail/bin/simscan",ENVELOPE_SCANNER="/var/qmail/bin/qenvscan-policyd",POLICYD_SERVER="127.0.0.1",POLICYD_PORT="10031" >>> >>> >>> Tanks, >>> Nandor Szabo >>> >>> >>> >>> >> >> >> Hello Nandor, >> >> I'm glad it's working for you. >> >> As for your suggestion, i'm not so sure that's a good idea. If you >> verify the recipient before enforcing greylisting, you'll be giving >> spammers an easier way to validate existing accounts. True that >> making recipient checking after greylisting will produce irrelevant >> triplets in the database, but i believe that the overhead is worth it. >> >> If you still feel so confident that you really want that behaviour, >> let me know and i'll see what i can come up with. >> >> Regards, >> >> Hugo Monteiro. >> > Tanks for yor quick respose. > Yes, you are rigth. With greylisting, it's more difficult to find out > valid addresses. > The order of this feature in qmail-smtpd are hardcoded? > > Regards, > Nandor Szabo > > Yes, the logic and call for the scanner appear before the recipient checking code block. To change the behaviour you can either move that block of code inside the switch that tests the result of the ldaplookup call, or duplicate that same code there and use an env var to define which has priority. The second approach would provide more flexibility, but it would also introduce more conditional jumps. R's, Hugo Monteiro. -- fct.unl.pt:~# cat .signature Hugo Monteiro Email : [email protected] Telefone : +351 212948300 Ext.15307 Web : http://hmonteiro.net Divisão de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.fct.unl.pt [email protected] fct.unl.pt:~# _