Charles, thank you for your suggestion.
In my previous message, I wrote:
<quote>
With this patch applied, tcpserver can:
1) Enable POP3 before SMTP by MySQL
2) Bypass greylisting for reliable IP address
3) Block POP3 access from malicious IP address
</quote>
But I should write:
This patch is the slight modification of 'UCSPI-TCP MySQL patch' Version
2, that is available at:
http://www.tnpi.biz/internet/mail/toaster/patches/tcpserver-mysql.shtml
With 'UCSPI-TCP MySQL patch', the list of reliable IP address can be
passed from 'vpopmail' to 'tcpserver' through MySQL table, not:
/etc/tcp.smtp.cdb
In other words, 'vpopmail' does not need to update:
/etc/tcp.smtp.cdb
for every successful POP3 authentication.
With this patch, greylisting can be skipped for those reliable IP address.
In addition, the list of malicious IP address can be passed from
'vpopmail' to 'tcpserver' through MySQL table, not:
/etc/tcp.smtp.cdb
If POP3 authentication fails more than 2 times from the same IP address
within 2 minutes, 'tcpserver' thinks it as malicious IP address and
drops the connection.
Any suggestions and questions are welcome to Jun Inamori
(jhq@osb.att.ne.jp).
Jun Inamori
patch4mysql_jgreylist_pop3.tar.gz
Description: GNU Zip compressed data
|