On Thu, February 8, 2007 15:50, Bart?omiej Dolata wrote:
> I'm using policyd version 1.80 on a gentoo-linux.
> So far it has worked great.

good, i have done my part on make it work on gentoo

> But I decided to give a network-block option a try.
> I changed config option BLACKLIST_NETBLOCK to 1
> and... it seems it does not work fine.

ok

> After looking into mysql query log I found these queries:
>
> INSERT DELAYED INTO blacklist (_blacklist,_description,_expire) VALUES ('
> 84.158.91.91.%','# blacklisted helo: (localhost)',0)
> INSERT DELAYED INTO blacklist (_blacklist,_description,_expire) VALUES ('
> 83.9.216.208.%','# blacklisted helo: (localhost)',0)

fine locks ok to me

> I do not believe these are correct as select()s that check the blacklist
> table are in a form resembling:
>
> SELECT COUNT(*) FROM blacklist WHERE _blacklist='83.21.147.98' OR
> _blacklist='83.21.147.%' OR _blacklist='83.21.%.%' OR _blacklist='83.%.%.%'
>
> which wouldnt match the previous insert()s

is 83.21.147.98 in blacklist at all ?

but atleat if you want to match on 83. alone there is a bug, the select is
imho ok, but results in policyd is not good

if i remember policyd will only match on /32 and /24 not on /16 and /8 in that
case its pointless to have the 2 last OR

confusion comes from greylistning ?

> Is it a bug or am I doing something wrong / not understanding something ?

depending on needs

-- 
This message was sent using 100% recycled spam mails.


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to