On 2007-02-25 22:39:50 +0100, Hans Salvisberg wrote:
> I run some of my domains with a catch-all address (i.e. no recipient 
> checking), and I have a considerable number of retired addresses there. 
> Many were never in actual use but have been invented by spammers! With 
> this setup check_verybadrcptto takes care of about half of my spam, 
> because a lot of spam includes one of the retired addresses in the 
> recipient list.
> 
> greylisting takes care of much of the remaining spam, but I have to run 
> it in deny_late mode, so that check_verybadrcptto can do its work (and 
> issue a hard DENY). In deny_late mode, greylisting defers denials until 
> hook_data (the documentation says hook_data_post, but this is wrong). 
> However it still does its database work in hook_mail and/or hook_rcpt, 
> even though a large number of transactions will receive a DENY before 
> greylisting ever gets a hook_data call.

Hmm. If you are running a domain with catch-all, worrying about the
efficiency of reading/writing a single record in a dbm file seems like
putting the cart before the horse to me.

I'd try to modify check_verybadrcptto to simply return DENY_DISCONNECT
in the recpipient handler and remove hook_data. That's against the idea
of check_verybadrcptto, but it's probably closer to what you want.

> It would be nice if the greylisting database work could also be 
> postponed until hook_data, when it's actually needed ("lazy 
> evaluation"), so that it can be skipped, if some earlier plugin returns 
> a DENY.

I think using deny_late is usually a mistake. I can't think of a
scenario where it's actually useful.

> It would also be nice, if a plugin like check_verybadrcptto could 
> somehow signal that the transaction is doomed, so that other, more 
> expensive plugins could tell that they don't need to run anymore.

I think that in that case the plugin should return DENY_DISCONNECT or
DENYSOFT_DISCONNECT. There's little point in keeping the connection open
if it is doomed (unless you're running a spamtrap, but then you probably
don't worry about expensive plugins).

        hp

-- 
   _  | Peter J. Holzer    | I know I'd be respectful of a pirate 
|_|_) | Sysadmin WSR       | with an emu on his shoulder.
| |   | [EMAIL PROTECTED]         |
__/   | http://www.hjp.at/ |    -- Sam in "Freefall"

Attachment: signature.asc
Description: Digital signature

Reply via email to