Re: [milter-greylist] SIGSEV upon conf reload
2004-05-27 by manu@netbsd.org
... (snip) ... If you can t get a core, you can run it under gdb, that should do it. -- Emmanuel Dreyfus Il y a 10 sortes de personnes dans le monde: ceux qui
Yahoo Groups archive
Messages
Page 144 of 144 · 7199 messages matched
2004-05-27 by manu@netbsd.org
... (snip) ... If you can t get a core, you can run it under gdb, that should do it. -- Emmanuel Dreyfus Il y a 10 sortes de personnes dans le monde: ceux qui
2004-05-27 by Cyril Guibourg
Hi list, Did someone experienced the same behaviour ? milter-greylist running fine for a while, updates done to greylist.conf and then process killed after
2004-05-27 by Cyril Guibourg
... Your setup is 3v1l :-)
2004-05-27 by manu@netbsd.org
... Thanks. I wonder how it can build at mine. -- Emmanuel Dreyfus Il y a 10 sortes de personnes dans le monde: ceux qui comprennent le binaire et ceux qui ne
2004-05-27 by Cyril Guibourg
I just download the tarball and fail to compile under FreeBSD: bison -y -p`echo conf_yacc.c|sed s/^ ([^_] {1, }_ ).*$/ 1/ ` conf_yacc.y conf_yacc.y:142.8:
2004-05-27 by Matthieu Herrb
... It builds find, but Makefile.in hardcodes -Wall -O2 into CFLAGS. Since I m too lazy for now to fix your configure.in script to only set those options if
2004-05-27 by Emmanuel Dreyfus
... There is no reason why it should not build with Solaris cc. What error do you have? -- Emmanuel Dreyfus manu@netbsd.org
2004-05-27 by Matthieu Herrb
... This is a small patch that I need to build milter-greylist really out of the box on my Solaris machines, where cc is Sun s compiler and gcc is called
2004-05-27 by Emmanuel Dreyfus
... At least this could be configurable. I filter viruses using milter-regex, it costs CPU but not memory, so I d prefer greylisting to take place after virus
2004-05-27 by Matthias Scheler
... No, it is *good*. Scanning for a virus is expensive. One of the reasons I m using milter greylist is that it keeps a lot of virus infected e-mails from my
2004-05-27 by Matthias Scheler
... And it is a bad idea anyway. Virus checking causes a lot of load on mail server. So it is good if milter greylist blocks virus even if that makes the
2004-05-27 by Matthieu Herrb
... I wonder how you d do that. Given how milter and greylists works, it looks impossible to me. Greylisting happens before the body of the message has been
2004-05-27 by manu@netbsd.org
... Mmm you are right, I m greylisting viruses while I thought I wasn t. That s bad, I d like to fix it. It could be fixed by sending the answer after the end
2004-05-26 by Dan Hollis
... most viruses don t have a listener on 25/tcp. -Dan
2004-05-26 by manu@netbsd.org
From the Changelog: 1.3.4: DNS support in greylist.conf through the domain keyword Make the greylist timeout a config file option The other desirable features
2004-05-26 by manu@netbsd.org
... Yes, it is now possible to whitelist using DNS names. Use either domain someisp.com or domain /.* .someisp .com$/ Depending what you want ( domain
2004-05-26 by Dan Hollis
... Database still has problems: long email addresses are truncated. Is the database storage system going to change? You said you had given up on berkeley db.
2004-05-26 by milter@free.fr
... As the song goes I feel a change s gonna come (*) : http://news.com.com/2100-1032-5220253.html There is a coming merge of SPF and M$ Caller Id . At least
2004-05-26 by manu@netbsd.org
... Please show me a real-life situation where this triggers a real problem. ... It depends on the feedbacks about version 1.3.3. If people are happy with it
2004-05-26 by Dan Hollis
... This is really it. He s thinking that his IP has been blacklisted in some RBL so he s trying again from another IP hoping that not all of them are
2004-05-26 by Dan Hollis
... In order for honeypot to be useful it needs to be easy to deploy, like milter-greylist. E.g. not these spaghetti mess of other honeypot software. Hopefully
2004-05-26 by Dan Hollis
Is it possible to add wildcard support in the addr clause? E.g. addr *.someisp.com Adding some 100 s of addr clauses to cover all the dialup IP blocks we have
2004-05-26 by manu@netbsd.org
Dan Hollis wrote: [Honeypots] ... Yes, DST (Distributed Spam Traps) already does all of this. But there is no doc written yet, and the
2004-05-26 by manu@netbsd.org
... Not yet. The addr clause only works with netblocks. It s probably the next big feature to add. -- Emmanuel Dreyfus Il y a 10 sortes de personnes dans le
2004-05-26 by manu@netbsd.org
... I m pretty convinced it s a real mail server that relayed the virus. I suspect it just accepted the virus from its internal domain and propagates it
2004-05-26 by Matthias Scheler
... SPF records are not widely-used at moment. And my proposal would provide the same functionality with requiring SPF records. Kind regards -- Matthias
2004-05-26 by Cyril Guibourg
... How do you tell this *is* a virus and *not* some MTA trying to deliver some infected message ? $ telnet vserver-raccourci.nexen.net 25 Trying
2004-05-26 by milter@free.fr
... This kind of DoS occurs not only with grey-listing but also with use of blacklists at the sendmail level. Now some spammers seems to do retry from other
2004-05-26 by Jacques Beigbeder
... Everything, including spams and virus. ... I don t agree. I estimated 100 MORE connections per day per user. 5000 users = 500.000 more SMTP connections.
2004-05-26 by Emmanuel Dreyfus
... When you count 200k connections per day, do you count everything, or everything minus spam and viruses? If it s everything, then most of your connections
2004-05-26 by Jacques Beigbeder
... May be but... If I look at my setting, I estimate there are 100 more SMTP connections per user per day due to greylisting. For a site with 5000 users (my
2004-05-26 by Emmanuel Dreyfus
... I can see only one explanation for that: it beileived x.x.x.x/0 was whitelisted. We could probably have a particular test to catch that, because nobody
2004-05-26 by Matthieu Herrb
... I ve seen that too. I ve ended up with dnl Max connexions par secondes define(confCONNECTION_RATE_THROTTLE,`10 ) in my sendmail.mc to limit the impact of
2004-05-26 by Matthieu Herrb
... [...] ... Make the config file parser a bit more robust. I got caught a couple of times after manually adding a whitelist entry with a (unwanted) syntax
2004-05-26 by Emmanuel Dreyfus
... Well this seems to be the kind of problem why SPF was created for, wasn t it? -- Emmanuel Dreyfus manu@netbsd.org
2004-05-26 by Matthias Scheler
... What about auto MX whitelisting: If host.foo.bar delivers an e-mail from user@do.main an host.foo.bar is listed in the MX records of do.main don t
2004-05-26 by Cyril Guibourg
... Run ! run !!! ;^)
2004-05-26 by Emmanuel Dreyfus
... That s fine for me provided I remain ahead of the spammers during that process :) -- Emmanuel Dreyfus manu@netbsd.org
2004-05-26 by Cyril Guibourg
... This is clearly an escalation process. ... Once I am done with the milter-greylist FreeBSD port I will be glad to play with it.
2004-05-26 by Emmanuel Dreyfus
... That s why I think this is just some evil assault which is not related to spam. I already saw floods of messages that knocked down my servers, and
2004-05-26 by Emmanuel Dreyfus
... (snip) ... Surely this is a DDOS, but it is not especially aimed at greylisting. With greylisting, it eats your memory, and if you use SpamAssassin, it
2004-05-26 by Cyril Guibourg
... This can be controlled by fixing the max number of childs and combined with connection refuse on high LA values you can dramaticaly mitigate any risk of
2004-05-26 by Jacques Beigbeder
Hello, Last week, I installed milter-greylist for some email addresses. ... [ .... ] 222.136.25.31
2004-05-26 by Cyril Guibourg
... Oooops, that make sense. I was into another galaxy when I wrote it, I m going to drink another coffee ;^) ... Yep, it s nice. ... Why not, I agree with the
2004-05-26 by Emmanuel Dreyfus
... It would just not whitelist, and the message would go through greylisting. Not something really horrible. ... Oh, yes, good idea. In fact, per-user config
2004-05-26 by Cyril Guibourg
... Hello, ... Imho this could end into another issue if for some reason reverse resolution is broken for a while (NXDOMAIN ?) how would whitelist code react
2004-05-26 by Emmanuel Dreyfus
Hi Now that the scallability problem has been somewhat handled, I think about pushing a new stable release. Of course this means testing latest 1.3.x code a
2004-05-25 by Cyril Guibourg
... Salut Manu, One thing I know about yahoogroups is that if their servers encounter few bounces your addy is wiped out of the list very quickly: around three
2004-05-25 by Emmanuel Dreyfus
Hello everybody First I d like to thank Dan Hollis for taking care of this list, I m sure it will be a usefull place for improving milter-greylist.