>-----Message d'origine-----
>De : [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] la part de Davide Libenzi
>Envoyé : jeudi 27 novembre 2008 18:34
>À : XMail Users Mailing List
>Objet : Re: [xmail] glst 0.27 xnet bug ?
>
....

>"mnet" masking is applied *before* "xnet" whitelisting.
Supposing it's the good way (I don't agree at all :) ), 
in the given sample, the xnet 172.16.254.0,255.255.255.255 is not "exclude"
as shown in the logs
- 172.16.254.0 real client ip 'masked' with the mnet
0.0.0.0,0.0.0.0,255.255.255.0 gives the final mnet'ed ip 172.16.254.0
- mnet'ed ip 172.16.254.0 matchs the xnet 172.16.254.0,255.255.255.255 (=
172.16.254.0 too)

So why in this case glst 'greylist' it ?

>... It makes even 
>sense. If for you a given address set is "the same" (this is 
>what mnet" 
>does), it makes no sense having different policies inside that set.

Many isp's have smtp servers mixed with webmail or web servers or
'utilities' machines, in the same subnet. It make sense to only accept some
without delay but delay the others that sould not be 'regular' smtp servers

Considering mnet to 0.0.0.0,0.0.0.0,255.255.255.0 (C class) :
How can I ask glst to accept x35.xmailserver.org (ip 64.71.152.41) without
'delay' but want to delay any other 64.71.152.0/24 I know nothing about ?

With your point of view, I can't or have to accept with no delay all with
the matching mnet'ed network so with a xnet set to
64.71.152.0,255.255.255.0, so accepting with no delay the others, not only
x35.xmailserver.org.

So I definitively don't agree :)
Client ip's should be considered the sames (mnet masking for greylist
triplet) only if finaly you want it to be 'greylisted' (so xnet masking to
exclude those you don't want to delay before greylist process)


Francis
_______________________________________________
xmail mailing list
xmail@xmailserver.org
http://xmailserver.org/mailman/listinfo/xmail

Reply via email to