http://groups.yahoo.com/group/milter-greylist/ milter-greylist Mon, 20 May 2013 13:30:36 GMT Jim Klimov http://groups.yahoo.com/group/milter-greylist/message/6122 http://groups.yahoo.com/group/milter-greylist/message/6122 ... Hmm... I guess you're right. Still, it can be part of the expiration mechanism - if the server has the blacklist entry removed by the time of TTL Mon, 20 May 2013 04:39:29 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6121 http://groups.yahoo.com/group/milter-greylist/message/6121 ... Another idea: for each A record stored, I can add a TXT record for the current date. For instance, for today may 20th, I blacklist 192.0.2.1 and 192.0.2.2. Mon, 20 May 2013 04:36:02 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6120 http://groups.yahoo.com/group/milter-greylist/message/6120 Here is milter-greylist-4.5.1 http://ftp.espci.fr/pub/milter-greylist/milter-greylist-4.5.1.tgz MD5 (milter-greylist-4.5.1.tgz) = Sun, 19 May 2013 14:39:16 GMT Peter Bonivart http://groups.yahoo.com/group/milter-greylist/message/6119 http://groups.yahoo.com/group/milter-greylist/message/6119 ... Don't log the addition until you have actually done the nsupdate op, after that it's BINDs responsibility and it uses journaling for the transactions so it Sun, 19 May 2013 14:23:23 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6118 http://groups.yahoo.com/group/milter-greylist/message/6118 ... That may be the easiest way. Using the greylisting database requires heavy refactoring, as the stored object is quite different from the current tuple. One Sun, 19 May 2013 11:10:36 GMT Peter Bonivart http://groups.yahoo.com/group/milter-greylist/message/6117 http://groups.yahoo.com/group/milter-greylist/message/6117 ... Maybe the addition could be logged and the timestamp could be used by an external script to remove old entries. /peter Sun, 19 May 2013 11:03:00 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6116 http://groups.yahoo.com/group/milter-greylist/message/6116 ... Yes, you are right. TTL is no expiration mechanism. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@... Sun, 19 May 2013 09:37:59 GMT Peter Bonivart http://groups.yahoo.com/group/milter-greylist/message/6115 http://groups.yahoo.com/group/milter-greylist/message/6115 ... But TTL is for the client to decide if it should refresh it's cache or not (use cache or ask server again), it doesn't mean the record will expire on the Sun, 19 May 2013 09:27:36 GMT Jim Klimov http://groups.yahoo.com/group/milter-greylist/message/6114 http://groups.yahoo.com/group/milter-greylist/message/6114 I do use site-specific configurations (likely anyone does somehow) by creating a number of files named like "greylist-01-common.conf" and so on for manual Sun, 19 May 2013 09:17:44 GMT Jim Klimov http://groups.yahoo.com/group/milter-greylist/message/6113 http://groups.yahoo.com/group/milter-greylist/message/6113 ... Well, I used dynamic DNS in our LAN to point a service name to recently-working instances of the service (i.e. "proxy" points to several SQUID instances if Sun, 19 May 2013 08:42:03 GMT Peter Bonivart http://groups.yahoo.com/group/milter-greylist/message/6112 http://groups.yahoo.com/group/milter-greylist/message/6112 ... A simple way would be not to change anything! If we change an included file we touch the greylist.conf-file ourselves to trigger a reload. I think those Sun, 19 May 2013 05:12:05 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6111 http://groups.yahoo.com/group/milter-greylist/message/6111 Hi I am working on nsupdate support in milter-greylist, so that an action clause in an ACL can trigger a DNS update, which enables milter-greylist to feed a Sun, 19 May 2013 01:43:03 GMT manu@... http://groups.yahoo.com/group/milter-greylist/message/6110 http://groups.yahoo.com/group/milter-greylist/message/6110 ... You need to monitor included file changes to detect configuration changes. Feel free to send a patch to the list. -- Emmanuel Dreyfus Sat, 18 May 2013 18:49:03 GMT elrond421 http://groups.yahoo.com/group/milter-greylist/message/6109 http://groups.yahoo.com/group/milter-greylist/message/6109 [Reviving an old discussion...] ... This would also make distribution maintaining easier. Parts of the file maintained by the distributor (socket location for Tue, 09 Apr 2013 16:09:40 GMT Emmanuel Dreyfus http://groups.yahoo.com/group/milter-greylist/message/6108 http://groups.yahoo.com/group/milter-greylist/message/6108 ... I address that by having user-configurable recipient-dependent greylisting delays. They can choose no greylisting, 15mn greylisting, 15mn greylisting + 12h