Milter-greylist

Hello

I want to greylist envelope from address like the following one

martinwbqxmgwlegros@...


with the following  regex directes in greylist.conf

extendedregex
racl greylist from /^[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{6,10}[a-z]{4,16}@[a-z]{4,16}\.icu$/ delay 4h autowhite 10m

I found no line matching this regex :

# grep -i 'delayed for 04:' /var/log/maillog
match nothing



# grep -E '[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{5,10}[a-z]{4,16}@[a-z]{4,16}\.icu' /var/log/maillog
match a lots of lines.

What is wrong with this racl ?

Regards.

PS. milter-greylist is 4.6.2

-- 
Christian P�lissier
\ue40aONERA DSI/ISR BP72 92322 Chatillon CEDEX\ue409
\ue201 34419

On Wed, Apr 10, 2019 at 10:08:03AM +0200, Christian P\ufffdlissier Christian.Pelissier@... [milter-greylist] wrote:
[..]
> 
> I want to greylist envelope from address like the following one
> 
> martinwbqxmgwlegros@...
> 
> 
> with the following  regex directes in greylist.conf
> 
> extendedregex
> racl greylist from /^[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{6,10}[a-z]{4,16}@[a-z]{4,16}\.icu$/ delay 4h autowhite 10m
> 
> I found no line matching this regex :
> 
> # grep -i 'delayed for 04:' /var/log/maillog
> match nothing

I'm not sure, but you might consider the enclosing brackets of an e-mail address.
Try to use /^<?REGEXP>?$/ ...

> # grep -E '[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{5,10}[a-z]{4,16}@[a-z]{4,16}\.icu' /var/log/maillog
> match a lots of lines.
[..]

This RE probably matches because it is not pinned down to the start and end of an address.


Johann

Le mercredi 10 avril 2019 � 13:47 +0200, Johann Klasek johann@...
[milter-greylist] a �crit :

> 
> > extendedregex
> > racl greylist
> from /^[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{6,10}[a-z]{4,16}@[a-z]{4,16}\.icu$/ delay 4h autowhite 10m
> > 
> > I found no line matching this regex :
> > 
> > # grep -i 'delayed for 04:' /var/log/maillog
> > match nothing
> 
> I'm not sure, but you might consider the enclosing brackets of an
> e-mail address.
> Try to use /^<?REGEXP>?$/ ...
> 
> > # grep -E
> '[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{5,10}[a-z]{4,16}@[a-z]{4,16}\.icu' /var/log/maillog
> > match a lots of lines.
> [..]
> 
> This RE probably matches because it is not pinned down to the start
> and end of an address.

> Johann

For the racl keyword , which env from is compared to  /regex/ ?

"firstname lastname" <wwwwwwwwwwwwwwwwwww@...> effectively do not
match with ^...$

from /<[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{6,10}[a-z]{4,16}@[a-z]{4,16}\.icu>/

should be better
> 
> 
> 
> pi�ce jointe document texte brut (SpamAssassinReport.txt)
> Le dispositif de filtrage op�rant sur le serveur de messagerie :
> "emix.onera.fr", a class� ce message :  ( 5.8 / 5.0 )
> 
> Pts  Nom r�gle              Description
> ---------
>  2.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
>                             blocklist
>                             [URIs: thesmartpune.icu]
>  0.1 URIBL_SBL_A            Contains URL's A record listed in the Spamhaus SBL
>                             blocklist
>                             [URIs: thesmartpune.icu]
>  0.6 URIBL_SBL              Contains an URL's NS IP listed in the Spamhaus SBL
>                             blocklist
>                             [URIs: thesmartpune.icu]
>  1.7 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
>                             [URIs: thesmartpune.icu]
>  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
>                             [URIs: thesmartpune.icu]
>  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
>                             domains are different
> -0.0 SPF_PASS               SPF: sender matches SPF record
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
>                             background
> -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
>                             domain
> -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
>  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
> -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
>                             manager
> -0.0 DKIMWL_WL_HIGH         DKIMwl.org - Whitelisted High sender
> 
> 

-- 
Christian P�lissier
\ue40aONERA DSI/ISR BP72 92322 Chatillon CEDEX\ue409
\ue201 34419

Christian Pélissier Christian.Pelissier@... [milter-greylist]
<milter-greylist@yahoogroups.com> wrote:

> racl greylist from
/^[a-z]{4,16}[bcdfghjklmnpqrstvwxz]{6,10}[a-z]{4,16}@[a-z]{4,16}\.icu$/
delay 4h autowhite 10m

Try without leading ^ and tailing $ ?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...