On Tue, 2015-03-17 at 14:21 -0700, Gordon Messmer wrote:
> > On Tue, 2015-03-17 at 09:47 -0700, Gordon Messmer wrote:
> >> On 03/16/2015 10:30 PM, Lindsay Haisley wrote:
> >>> I whitelisted this IP
> >>> address in /etc/courier/smtpaccess/webadmin using the Courier web UI,
> >> ...
> >>> Is this a bug in whitelist_relayclients?
> >>
> >> Probably.  Did you mean that the webadmin file has "::1" or that the web
> >> UI shows that address?
> >
> > Both.
> 
> That's weird.  According to the documentation for couriertcpd, the entry 
> in the file should be:
> 
> :0000:0000:0000:0000:0000:0000:0000:0001        allow,BLOCK,RELAYCLIENT

Actually, when I started poking at the smtpaccess files I found out that
I already had a couple of lines in the default file:

127.0.0.1       allow,RELAYCLIENT
:0000:0000:0000:0000:0000:0000:0000:0001        allow,RELAYCLIENT

This allows relaying from both the v4 and v6 localhost addresses, but
doesn't whitelist them.  If I change these to "allow,BLOCK,RELAYCLIENT"
should this exempt these addresses from ratelimiting by ratelimit.py?
If not then we still have an issue since I have whitelist_relayclients
in the pythonfilter mix and I was still getting ratelimit hits such as:

> Mar 17 14:22:08 mitra courieresmtpd: 
> error,relay=::1,from=<hdlist-bounces+ragsmckay=hotmail....@hammered-dulcimers.org>:
>  421 Too many messages from dns; mitra.fmp.com ([::1]), slow down.

...until I hacked an exemption for "::1" into ratelimit.py

-- 
Lindsay Haisley       | "UNIX is user-friendly, it just
FMP Computer Services |       chooses its friends."
512-259-1190          |          -- Andreas Bogk
http://www.fmp.com    |


------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to