Package: postgrey
Version: 1.27-4
Tags: patch
Severity: important
Justification: google handles a lot of mail, so this has rather big implications

This is also the case for 1.27-4volatile1. I did not look into lenny/sid
packages, but they also might be affected.

/usr/share/postgrey/whitelist_clients contains:

# google.com (big pool, reported by Matthias Dyer)
/^.*-out-.*\.google\.com$/

Unfortunately this is not enough. Google services occasionally send mail
from hosts with PTRs such as mail-gx0-f60.google.com which obviously
does not match the regex.

I personally was hit with the lack of a whitelist entry for such hosts
after my private email domain disappeared off DNS for a few days.
Subsequent probe messages from Google groups happened to be sent from
addresses like the the abovementioned one, and were refused by postgrey.
That meant I could not receive messages from google groups for a few
months.

After discussing this with the team at Google which deals with external
mail delivery, we finally agreed that the best way to work around it is
to add _additional_ entry, with the following regex:

/^mail.*\.google\.com$/

We could also fold both regexes into one if needed, but it is important
NOT to remove the one that is currently distributed.

-- 
Marcin Owsiany <[EMAIL PROTECTED]>             http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to