Milter-greylist

Here is our latest developement snapshot. As on e can see in the Changelog, 
things keep moving a lot:
        Fix double free when using content filtering
	ACL clauses can now be negated
	msg clauses in ACL can use format strings substitution
	Add an ACL clause to customize X-Greylist header
	Fix serious bugs in DNSRBL code (Jacques Beigbeder)
	Fix a display bug for netblocks
	Add a time clause to match against time sets
	GeoIP support, through the geoip clause
	Fix warning for Postfix build (Nerijus Baliunas)
	%g for substitution by regex back references
	%I for susbtitution by sender IP masked by a CIDR
	Allow specifying socket mode in config file
	Set default user to root for .spec file
	Do not drop root privs if we do not run as root

Get it from the usual place:
http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.5.tgz
MD5 (milter-greylist-3.1.5.tgz) = b7bd51bf4a2d542d5d1f212fc928dfd1
-- 
Emmanuel Dreyfus
manu@...

On Mon, 12 Feb 2007, Emmanuel Dreyfus wrote:

Hey all,

I've been following this mailing list avidly, but as I keep seeing new 
3.1.x releases out, I'd like to ask:

Is there anyone uot here running it on a production system, who would 
consider it stable enough for that use?

I'm eager to get some of the new features -- specifically to get this HUGE 
amount of memory freed up.

-Dan


> Here is our latest developement snapshot. As on e can see in the Changelog,
> things keep moving a lot:
>        Fix double free when using content filtering
> 	ACL clauses can now be negated
> 	msg clauses in ACL can use format strings substitution
> 	Add an ACL clause to customize X-Greylist header
> 	Fix serious bugs in DNSRBL code (Jacques Beigbeder)
> 	Fix a display bug for netblocks
> 	Add a time clause to match against time sets
> 	GeoIP support, through the geoip clause
> 	Fix warning for Postfix build (Nerijus Baliunas)
> 	%g for substitution by regex back references
> 	%I for susbtitution by sender IP masked by a CIDR
> 	Allow specifying socket mode in config file
> 	Set default user to root for .spec file
> 	Do not drop root privs if we do not run as root
>
> Get it from the usual place:
> http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.5.tgz
> MD5 (milter-greylist-3.1.5.tgz) = b7bd51bf4a2d542d5d1f212fc928dfd1
>

--

"It's buttery kettle ASS corn!"

-Dan Mahoney, Ezzi Computers,
10/22/03, 2AM

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------

I m running the before-to-latest version on a production system, it works like a charm...and free d me a LOT of load on my server I m running it with

On Tue, 13 Feb 2007 13:26:43 -0500 (EST) "Dan Mahoney, System Admin" <danm@...> wrote:

> Is there anyone uot here running it on a production system, who would 
> consider it stable enough for that use?

Me.

Regards,
Nerijus

Manu,

According to Emmanuel Dreyfus:
> Get it from the usual place:
> http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.5.tgz

it's off topic but just in case you have access to your apache configs,
could you please allow longer filenames so that
http://ftp.espci.fr/pub/milter-greylist/ reads better?

Usually, it is just a matter of adding or setting "NameWidth=*" to IndexOptions.
Thanks.

/Fabien

> http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.5.tgz

I've tried this one (Debian unstable) as an upgrade from a perfectly
working 2.1.12.

- ./configure --enable-dnsrbl
(as it's a pain to recompile bind9 everytime, I just changed the linker
step to /.../libresolv.a from -lresolv).

- it fails to start because it is now unable to create its socket into
/var/milter-greylist because this dir is now owned by root (as
requested by make install).

- after 'chown -R smmsp:smmsp /var/milter-greylist/', it starts correctly.

after a short while, it fails:

Feb 13 22:00:26 x milter-greylist: realloc failed: Success
Feb 13 22:00:26 x sm-mta[28508]: l1DL0ITf028508: milter_read(greylist): cmd read returned 0, expecting 5
Feb 13 22:00:26 x sm-mta[28508]: l1DL0ITf028508: Milter (greylist): to error state
Feb 13 22:00:26 x sm-mta[28508]: l1DL0ITf028508: from=<tipm@...>, size=1946, class=0, nrcpts=1, msgid=<f69be72f1b1df.45cca8ba@...>, proto=ESMTP, daemon=Daemon0, relay=pop1.slt.lk [203.115.0.59]

after a restart, it simply stops with this:

Feb 13 22:12:54 x sm-mta[29986]: l1DLCbKI029986: Milter (greylist): timeout before data read
Feb 13 22:12:54 x sm-mta[29986]: l1DLCbKI029986: Milter (greylist): to error state
(no log from milter-greylist, which is still alive BTW).

another restart:

Feb 13 22:21:01 x sm-mta[30237]: l1DLKo9q030237: Milter (greylist): timeout before data read
Feb 13 22:21:01 x sm-mta[30237]: l1DLKo9q030237: Milter (greylist): to error state
Feb 13 22:21:01 x sm-mta[30237]: l1DLKo9q030237: Milter (greylist): init failed to open
Feb 13 22:21:01 x sm-mta[30237]: l1DLKo9q030237: Milter (greylist): to error state

I'm back to 2.1.12 for tonight.

/Fabien

On Tue, 13 Feb 2007 22:33:53 +0100 Fabien Tassin <fta+miltergreylist@...> wrote:

> > http://ftp.espci.fr/pub/milter-greylist/milter-greylist-3.1.5.tgz
> 
> I've tried this one (Debian unstable) as an upgrade from a perfectly
> working 2.1.12.
> 
> - ./configure --enable-dnsrbl
> 
> - it fails to start because it is now unable to create its socket into
> /var/milter-greylist because this dir is now owned by root (as
> requested by make install).

If you used a Debian package of 2.1.12, and now overwritten it with make install,
of course things will not work. You should either make a package for 3.1.5,
or uninstall 2.1.12 package and the install from source using correct configure
flags (--with-user etc).

Regards,
Nerijus

Fabien Tassin <fta+miltergreylist@...> wrote:

> - it fails to start because it is now unable to create its socket into
> /var/milter-greylist because this dir is now owned by root (as
> requested by make install).

That's your fault, use configure --with-user=smmsp 

> - after 'chown -R smmsp:smmsp /var/milter-greylist/', it starts correctly.
> 
> after a short while, it fails:
> 
> Feb 13 22:00:26 x milter-greylist: realloc failed: Success

That was a bug. I just committed a fix for it.
Can you give a try to the CVS version, or do youi need a 3.1.6 tarball?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

According to Nerijus Baliunas:
> 
> > - it fails to start because it is now unable to create its socket into
> > /var/milter-greylist because this dir is now owned by root (as
> > requested by make install).
> 
> If you used a Debian package of 2.1.12, and now overwritten it with make install,
> of course things will not work. You should either make a package for 3.1.5,
> or uninstall 2.1.12 package and the install from source using correct configure
> flags (--with-user etc).

nope, no deb. I've installed plenty of milter-greylist releases before but
stopped at 2.1.12 for production and at 3.0rc5 for testing, all manually
installed in /usr/local, like I do for any non-debian tools.
It occurs it's just that my init script differs from the new one for USER.
No big deal as I worked around it easily.

I'm more concerned by realloc failing and the subsequent timeouts without
logs.

/Fabien

According to manu@...:
> 
> > Feb 13 22:00:26 x milter-greylist: realloc failed: Success
> 
> That was a bug. I just committed a fix for it.
> Can you give a try to the CVS version, or do youi need a 3.1.6 tarball?

cvs is okay (a diff against 3.1.5 would have been nice too).
I'm now running it, seems good so far.

BTW, it would be nice to add the cvs info somewhere in the README, I found
them in a months old email.

/Fabien

On Tue, 13 Feb 2007 23:48:21 +0100 Fabien Tassin <fta+miltergreylist@...> wrote:

> BTW, it would be nice to add the cvs info somewhere in the README, I found
> them in a months old email.

It's in http://hcpnet.free.fr/milter-greylist/ :

Check out latest code through CVS:
export CVS_RSH=ssh; cvs -danoncvs@...:/milter-greylist co -P milter-greylist

So if you download from the home page, you should see it, if you are
subscribed to the list, you should have seen an announcement.

Regards,
Nerijus

On Tue, 13 Feb 2007, Fabien Tassin wrote:

> According to manu@...:
>>
>>> Feb 13 22:00:26 x milter-greylist: realloc failed: Success
>>
>> That was a bug. I just committed a fix for it.
>> Can you give a try to the CVS version, or do youi need a 3.1.6 tarball?
>
> cvs is okay (a diff against 3.1.5 would have been nice too).
> I'm now running it, seems good so far.
>
> BTW, it would be nice to add the cvs info somewhere in the README, I found
> them in a months old email.

They are also on the site.

-Dan

--

"I'll commit ritual suicide before I whore myself out to Disney."

--Emi Bryant
   April 26, 2004
   On the animation industry

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------

Fabien Tassin <fta+miltergreylist@...> wrote:

> BTW, it would be nice to add the cvs info somewhere in the README, I found
> them in a months old email.

It's on the web site, but you are right, I'll add it to the README.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

According to Nerijus Baliunas:
> 
> > BTW, it would be nice to add the cvs info somewhere in the README, I found
> > them in a months old email.
> 
> It's in http://hcpnet.free.fr/milter-greylist/ :
 
> So if you download from the home page,

not quite. I just grabbed 3.1.5 from the URL provided by manu with the
success I've reported. I had a look at the parent dir to see if there was
another version available (see my other email regarding apache), or CVS
daily snapshots, or maybe a README. Nothing. Then Manu said he fixed
the realloc bug in CVS so I tried 'grep -i cvs *' in the tarball.
Fortunatly, I love Mutt so it was just a matter of ~s greylist ~b cvs.
My *last* option would have been the website.

> you should see it, if you are
> subscribed to the list, you should have seen an announcement.

yeah, I should have done plenty of stuff but obviously I didn't.
Don't assume everyone think like you do.

/Fabien

Fabien Tassin <fta+miltergreylist@...> wrote:

> not quite. I just grabbed 3.1.5 from the URL provided by manu with the
> success I've reported. I had a look at the parent dir to see if there was
> another version available (see my other email regarding apache), or CVS
> daily snapshots, or maybe a README. Nothing.

The information is in 3.1.6's README.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...