Milter-greylist

Hi all,

I'm trying to milter-greylist working. I'm using sendmail-8.13.8 and the following  m4 config :

INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter-greylist.sock')dnl
define(`confMILTER_MACROS_CONNECT', `j, {if_addr}')dnl
define(`confMILTER_MACROS_HELO', `{verify}, {cert_subject}')dnl
define(`confMILTER_MACROS_ENVFROM', `i, {auth_authen}')dnl
define(`confMILTER_MACROS_ENVRCPT', `{greylist}')dnl

Now, when our SMTP relay receive an email, I can see in maillog that milter-greylist grey list the message, but in the end sendmail accepts the message and forwards it to where it is suppose to go.

I tried with both version 4.2.7 and 4.3.9.
in sendmail.mc, ldap routing is enabled (and working) and milter-greylist is the only INPUT_MAIL_FILTER enabled.

Any hint ?

Thanks,
Ronan.


Sep  9 15:19:44 smtp milter-greylist: p89DJieM009573: addr smtp5-g21.free.fr[212.27.42.5] from <xxx@xxx> to <rsalmon@...> delayed for 00:05:00 (ACL 137)
Sep  9 15:19:44 smtp sendmail[9573]: p89DJieM009573: Milter: to=<xxx@xxx>, reject=451 4.7.1 Greylisting in action, please come back later
Sep  9 15:19:45 smtp sendmail[9573]: p89DJieM009573: from=<xxx@xxx>, size=813, class=0, nrcpts=0, proto=ESMTP, daemon=MTA-MILTER, relay=smtp5-g21.free.fr [212.27.42.5]

On Fri, Sep 09, 2011 at 01:37:00PM -0000, salmon.ronan wrote:
> 
> Hi all,
> 
> I'm trying to milter-greylist working. I'm using sendmail-8.13.8 and the following  m4 config :
> 
> INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter-greylist.sock')dnl

Maybe you should add after "...milter-greylist.sock" something like

, F=, T=C:20m;S:5m;R:5m;E:20m

to explicitly set several timeout parameters (T=) and the flag (F=) how
milter errors are to be handled (empty means sendmail proceeds if the
milter fails).

But this is not the problem ...

> define(`confMILTER_MACROS_CONNECT', `j, {if_addr}')dnl
> define(`confMILTER_MACROS_HELO', `{verify}, {cert_subject}')dnl
> define(`confMILTER_MACROS_ENVFROM', `i, {auth_authen}')dnl
> define(`confMILTER_MACROS_ENVRCPT', `{greylist}')dnl
> 
> Now, when our SMTP relay receive an email, I can see in maillog that milter-greylist grey list the message, but in the end sendmail accepts the message and forwards it to where it is suppose to go.

No, sendmail does not (according to the log below).

> 
> I tried with both version 4.2.7 and 4.3.9.
> in sendmail.mc, ldap routing is enabled (and working) and milter-greylist is the only INPUT_MAIL_FILTER enabled.
> 
> Any hint ?
> 
[..]
> 
> Sep  9 15:19:44 smtp milter-greylist: p89DJieM009573: addr smtp5-g21.free.fr[212.27.42.5] from <xxx@xxx> to <rsalmon@...> delayed for 00:05:00 (ACL 137)
> Sep  9 15:19:44 smtp sendmail[9573]: p89DJieM009573: Milter: to=<xxx@xxx>, reject=451 4.7.1 Greylisting in action, please come back later
> Sep  9 15:19:45 smtp sendmail[9573]: p89DJieM009573: from=<xxx@xxx>, size=813, class=0, nrcpts=0, proto=ESMTP, daemon=MTA-MILTER, relay=smtp5-g21.free.fr [212.27.42.5]

As far as I can see this is correct - sendmail logs only the receiving
part of the transfer! (with the "from=..."). The reject happened if you
have no line with message id p89DJieM009573 and with a " to=..." in your
logfile. ;)

If sendmail has forwarded a messages a to= line like this should appear:

Sep  9 00:00:05 mailserver sendmail[7789]: p88LxnUB007674: to=<my@domain>, delay=00:00:10, xdelay=00:00:00, mailer=smtp8, pri=125591, relay=forwarding.server [a.b.c.d], dsn=2.0.0, stat=Sent (Ok: queued as B8147ADAC)

So, it seems to be all ok.


Johann E. K.

>On Fri, Sep 09, 2011 at 01:37:00PM -0000, salmon.ronan wrote:
>> 
>> Hi all,
>> 
>> I'm trying to milter-greylist working. I'm using sendmail-8.13.8 and the following  m4 config :
>> 
>> INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter-greylist.sock')dnl
>
>Maybe you should add after "...milter-greylist.sock" something like
>
>, F=, T=C:20m;S:5m;R:5m;E:20m
>
>to explicitly set several timeout parameters (T=) and the flag (F=) how
>milter errors are to be handled (empty means sendmail proceeds if the
>milter fails).
>
>But this is not the problem ...

Nope, this is about tuning. But I tried with those option as well.


>> define(`confMILTER_MACROS_CONNECT', `j, {if_addr}')dnl
>> define(`confMILTER_MACROS_HELO', `{verify}, {cert_subject}')dnl
>> define(`confMILTER_MACROS_ENVFROM', `i, {auth_authen}')dnl
>> define(`confMILTER_MACROS_ENVRCPT', `{greylist}')dnl
>> 
>> Now, when our SMTP relay receive an email, I can see in maillog that milter-greylist grey list the message, but in the end sendmail accepts the message and forwards it to >>where it is suppose to go.
>
>No, sendmail does not (according to the log below).
>
>> 
>>I tried with both version 4.2.7 and 4.3.9.
>> in sendmail.mc, ldap routing is enabled (and working) and milter-greylist is the only INPUT_MAIL_FILTER enabled.
>> 
>> Any hint ?
>> 
>>
>> 
>> Sep  9 15:19:44 smtp milter-greylist: p89DJieM009573: addr smtp5-g21.free.fr[212.27.42.5] from <xxx@xxx> to <rsalmon@...> delayed for 00:05:00 (ACL 137)
>> Sep  9 15:19:44 smtp sendmail[9573]: p89DJieM009573: Milter: to=<xxx@xxx>, reject=451 4.7.1 Greylisting in action, please come back later
>> Sep  9 15:19:45 smtp sendmail[9573]: p89DJieM009573: from=<xxx@xxx>, size=813, class=0, nrcpts=0, proto=ESMTP, daemon=MTA-MILTER, relay=smtp5-g21.free.fr >>[212.27.42.5]
>
>As far as I can see this is correct - sendmail logs only the receiving
>part of the transfer! (with the "from=..."). The reject happened if you
>have no line with message id p89DJieM009573 and with a " to=..." in your
>logfile. ;)
Yes, according to sendmail's logs, the email has been rejected. But in reality, the email has been accepted and forwarded (a few seconds later) on to another internal server.

Ronan.