Qmail
[Top] [All Lists]

Re: SMTP_AUTH + RBLs

To: Qmail mailing list <qmail@list.cr.yp.to>
Subject: Re: SMTP_AUTH + RBLs
From: Ken Jones <kbo@inter7.com>
Date: Sun, 11 Mar 2007 12:45:42 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: gmail-qmail@securepoint.com
Delivered-to: sp.com.list@gmail.com
Delivered-to: mailing list qmail@list.cr.yp.to
In-reply-to: <20070309230710.GA27099@nachos.phaseit.com>
Mailing-list: contact qmail-help@list.cr.yp.to; run by ezmlm
References: <1f4ef0970703090910s6e36cae7j51f63a938ea98ff5@mail.gmail.com> <20070309194944.GD4080@c-76-18-79-168.hsd1.nm.comcast.net> <20070309202109.wjez67wv2ui6znx2@m.safari.iki.fi> <20070309203814.GH4080@c-76-18-79-168.hsd1.nm.comcast.net> <20070309210218.3xrsh4qsp6cl5jk3@m.safari.iki.fi> <20070309214610.GJ4080@c-76-18-79-168.hsd1.nm.comcast.net> <20070309221809.ogf2gnqb2khunsf6@m.safari.iki.fi> <20070309230710.GA27099@nachos.phaseit.com>
User-agent: Thunderbird 1.5.0.10 (X11/20070304)
Fabio Busatto wrote:
Probably you're talking about my patch:

http://qmail-dnsbl.sourceforge.net/

This is:
- well written (obviously :), using djb's coding style
- based only on original qmail code (you don't need to
  use an external resolve library, there is the qmail
  resolve library of course
- configurable with a file in qmail control directory
  (accessed through the original qmail control files
  functions)
- skipped using environment variables (to allow you
  choose using tcprules files
- quite intrusive (only a couple of lines in original
  qmail code, plus the function on its own
- provided with patches for manpages and qmail-showctl

I used it for months, and it feels good, and nobody has
reported bugs by now.

By the way other solutions (like the alternate port) can
be better, depending from the context. I prefer open only
25 on my firewall and provide dnsbl bypass for my authed
users instead of setup a new tcpserver instance.

Nice code!

We are using something similar to your code with great results.
It lets us use RBL's that include end user IPs like
zen.spamhaus.org with out blocking valid customers.

--
Ken Jones


<Prev in Thread] Current Thread [Next in Thread>