[milters] Archive

Lists Index Date Thread Search

Article: 1217
From: Mathias Koerber
Date: 2006-10-26 02:57:43 -0400
Subject: milter-gris: keeps denying greylisted mail

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

I have a problem with milter-gris (0.19, libsnert 1.62)

on restart, milter-gris reprorts:
> Oct 26 14:51:32 koerber milter-gris[20116]: milter-gris:
smfi_register: version mismatch application: 3 != milter: 2
> Oct 26 14:51:32 koerber milter-gris[20116]: process ruid=535
rgid=535 euid=535 egid=535
> Oct 26 14:51:32 koerber milter-gris[20116]: milter-gris/0.19.105
Copyright 2004, 2006 by Anthony Howe. All rights reserved.
> Oct 26 14:51:32 koerber milter-gris[20116]: LibSnert/1.62.835
Copyright 1996, 2006 by Anthony Howe. All rights reserved.
> Oct 26 14:51:32 koerber milter-gris[20116]: libmilter version 2 (4)
> Oct 26 14:51:32 koerber milter-gris[20116]: Sleepycat Software:
Berkeley DB 4.2.52: (March  2, 2004)


By accident, I saw that one specific email keeps consistently
rejected even though the 600 seconds are long over:

> Oct 26 09:14:05 koerber milter-gris[31839]: 20425 k9Q1Dwv4018273:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:14:05 koerber sendmail[18273]: k9Q1Dwv4018273: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:14:06 koerber sendmail[18273]: k9Q1Dwv4018273:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

> Oct 26 09:19:45 koerber milter-gris[31839]: 20430 k9Q1JdKZ018769:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:19:45 koerber sendmail[18769]: k9Q1JdKZ018769: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:19:46 koerber sendmail[18769]: k9Q1JdKZ018769:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

> Oct 26 09:25:32 koerber milter-gris[31839]: 20432 k9Q1PPJZ019357:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:25:32 koerber sendmail[19357]: k9Q1PPJZ019357: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:25:32 koerber sendmail[19357]: k9Q1PPJZ019357:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

> Oct 26 09:31:02 koerber milter-gris[31839]: 20436 k9Q1Utnj019913:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:31:02 koerber sendmail[19913]: k9Q1Utnj019913: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:31:02 koerber sendmail[19913]: k9Q1Utnj019913:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

> Oct 26 09:37:48 koerber milter-gris[31839]: 20441 k9Q1bgNL020568:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:37:48 koerber sendmail[20568]: k9Q1bgNL020568: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:37:49 koerber sendmail[20568]: k9Q1bgNL020568:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

> Oct 26 09:44:46 koerber milter-gris[31839]: 20452 k9Q1idNZ021220:
denied grey listing {139.7.28.128,a.b@vodafone.de,e@koerber.org} for
600 seconds
> Oct 26 09:44:46 koerber sendmail[21220]: k9Q1idNZ021220: Milter:
to=<e@koerber.org>, reject=450 4.7.1 try again later
> Oct 26 09:44:47 koerber sendmail[21220]: k9Q1idNZ021220:
from=<a.b@vodafone.de>, size=2930, class=0, nrcpts=0, proto=ESMTP,
daemon=MTA-v6, relay=outgoing.email.vodafone.de [139.7.28.128]

... and so on for hours...

(note: actual addresses obfuscated to protect the innocent)

The filesystem is not fill

# less /etc/mail/milter-gris.cf
accept-null-sender
access-db=/etc/mail/milter-gris-access.db
block-time=600
block-time-static=600
grey-list-key=ip,mail,rcpt
cache-type=/var/db/milter-limit.db
cache-gc-frequency=250
cache-temp-fail-ttl=604800
cache-type=bdb
daemon
milter-socket=unix:/var/run/milter/milter-gris.socket
milter-timeout=7210
pid-file=/var/run/milter/milter-gris.pid
run-group=milter
run-user=milter
verbose=info
work-dir=/var/tmp

The only non-standard config is that I use a separate access-file
for the milter-gris config (instead of folding the entries into
sendmail's /etc/mail/access, as I couldn't figure out the exact
syntac to prevent standard sendmail entries from applying to
milter-gris [ the docu on the entries for milter-gris is still
broken ])

I just found that another email was similarly blocked longer that
the 600 seconds. It seems that milter-gris 'forgets' it has seen
certain entries before.

I restarted milter-gris and removed its cache-db
/var/cache/milter-gris.db for now to see if it still happens..

Has anyone else ever seen this (and may have a cause/solution)?
any help would be very much appreciated

btw: why doesn't makemap -u show the RHS of the cache-database?

# makemap -u hash milter-gris.db | grep a.b
139.7.28.128,a.b@vodafone.de,e@koerber.org


doesn't indicate a timestamp (as one would expect) at all?

Mathias

Lists Index Date Thread Search