Milter-greylist

On Fri, Feb 18, 2011 at 11:06:47AM -0600, Les Mikesell wrote:
> On 2/18/2011 6:36 AM, Johann Klasek wrote:
> >
> >  >
> >  > > Sendmail is very quick at rejecting local addresses that are not in
> >  > > the aliases or virtuser tables so that is normally not a problem, but
> >  > > when milter-greylist is active it wants to greylist even the
> >  > > undeliverable addresses.
> >
> > What does this look like in maillog?
> 
> If I have 'acl greylist default ...." set, I get entries like:
> 
> Feb 18 09:57:43 mailmx milter-greylist: p1IFvfPf026150: addr 
> [118.96.199.46][118.96.199.46] from <rosfoewi00leobla@...> to 
> <pikepikephiru@...> delayed for :02:00 (ACL 119)
> Feb 18 09:57:43 mailmx sendmail[26150]: p1IFvfPf026150: Milter: 
> to=<pikepikephiru@...>, reject=451 4.7.1 Greylisting in action, 
> please come back later

No other entries referencing p1IFvfPf026150 do exist?
Strange ...

What does it look like if milter-greylist is *not* active?
Is something like
Feb 18 09:57:43 sendmail[26150]: p1IFvfPf026150: <pikepikephiru@...>... User unknown
in the log?

> 
> for every received message, even though the users don't exist. I'd 
> rather not do the extra processing.

Maybe I did not got the problem: What means "undeliverable address" when
it is neither local (local user or local alias) nor in the virusertable?

[..]
> 
> The target domains are considered local in sendmail.  I need the lookups 
> in virtusertable and aliases.
> 
> > A mail for 3 recipients @MYDOMAIN arrives. One of this recipients is an
> > existing address (checked via an equivalent mechanism to virtuser
> > table). The others are invalid. Miltergreylist adds only the entry for
> > joachim.fabini@MYDOMAIN (the valid address), the other address are
> > rejected.
> 
> What about aliases?

Of course, aliases and other "local users" which do not exist in
the host's maildomain handled in the same way.

> 
> >  > > For the moment I am working around it by
> >  > > tracking the 'real' users, including them in the milter-greylist
> > config,
> >  > > and restricting greylisting to the specified addresses. However, it
> >  > > would be nicer if this could be handled automatically by letting
> >  > > sendmail reject addresses it can't deliver first. Is there any way to
> >  > > do that?
[..]
> Sendmail seems to be very fast at checking virtusertable and aliases. 
> I'd rather not have to duplicate that elsewhere.   Or to have to 
> maintain the same set of acceptable addresses separately in the greylist 
> config file.  It doesn't seem to matter whether MimeDefang or 
> milter-greylist is first in sendmail.mc - it still wants to process all 
> local-looking targets.  Are there any options as to when it runs?

You mean local targets directly mapped to user accounts and aliases
are treated differently? What happens when an alias is mapped to a local
user?

Is there any difference if you check working/non working addresses
with
/usr/lib/sendmail -bv
# or more verbose
/usr/lib/sendmail -d21.15 -bv
?

Can you tell us how is the "local" mailer defined in sendmail.cf/sendmail.mc
(Mlocal line/Mailer(local) line)?


Johann K.