[milters] Archive

Lists Index Date Thread Search

Article: 1305
From: Michael Elliott
Date: 2006-11-30 03:27:51 -0500
Subject: Re: milter-gris still blacklisting the same tripel for > 2 days

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

> Removal...........: milters-request@milter.info?subject=remove
> More information..: http://www.milter.info/#Support
> --------------------------------------------------------
> 
> I thought this had been fixed by the patch I was given by
> Rene Berber <milters@legosoft.com.mx> but it is still happening :-(
> 
> Milter-gris denies the same tripel for days on end.
> 
> (I have obscured the email addresses in here to protect the innocent)
> 
> This really is worrysome as it means the mail will not make it through.
> 
> Has anyone seen this and/or got any solution/workaround
> (short of not using milter-gris?)

The other workaround is to put the following in the milter-gris.cf file.
# Grey list block time in seconds.
block-time=10

I have seen legitimate retries in 30 seconds from fast hosts.  

But, you have a second problem.  Your milter-gris process keeps changing
process ids, so it is continuously crashing and restarting.  Notice the 
milter-gris[8554]: 00028, it is really milter-gris[process_id]: message_number_processed  
and you are not going over 100 before you move on to a new process id.

Suggestions: 
1) recompile with Rene's patch again.  The line with "-" should be deleted, 
and the lines with "+" should be added, without the leading +/- on them.
2) stop the milter-gris process.
3) "sudo make install" to install the new binary.
4) delete the milter-gris.db file in order to flush the cache.  It may have been
corrupted.
5) set the block-time to 10 seconds as above.
6) start milter-gris.


1 and 3 are overkill because the patch looks like it worked. 
5 is a backup plan just in case.
4 may be the reason for the crashes.
 
> Nov 28 20:55:36 koerber milter-gris[8554]: 00028 kASCtUIq010156: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 600 seconds
> Nov 28 21:17:13 koerber milter-gris[8554]: 00043 kASDH6EI011624: accepted grey
listing {141.78.7.204,a.s@k.d,a@k.o}
> Nov 28 21:23:15 koerber milter-gris[8554]: 00049 kASDN9BD011982: accepted grey
listing {141.78.7.204,a.s@k.d,a@k.o}

> Nov 28 21:37:51 koerber milter-gris[12382]: 00003 kASDbjx8012936: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 600 seconds
> Nov 28 23:01:10 koerber milter-gris[16402]: 00034 kASF14vH018457: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 600 seconds
> Nov 29 00:13:33 koerber milter-gris[20350]: 00034 kASGDRkU023255: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 600 seconds
> Nov 29 00:19:43 koerber milter-gris[20350]: 00038 kASGJacE023572: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 230 seconds
   Ok.  The patch was working because the seconds value changed, but the process crashed
before the mail was let in.

> Nov 29 00:36:22 koerber milter-gris[24226]: 00004 kASGaGHB024713: denied grey listing
{141.78.7.204,a.s@k.d,a@k.o} for 600 seconds
> Nov 29 01:09:42 koerber milter-gris[24226]: 00024 kASH9a13026791: accepted grey
listing {141.78.7.204,a.s@k.d,a@k.o}
   Alive long enough to accept.

-Mike Elliott

Lists Index Date Thread Search