***SPAM*** ***SPAM*** Re: ***SPAM*** ***SPAM*** Re: [Patch] p0f and selective greylisting

2007-01-04 Thread Justin Piszcz
Lets hope Robert accepts the patch :)

On Thu, 4 Jan 2007, Gary V wrote:

> Justin wrote:
> 
> > Yet another way to combat spam, very impressive!
> 
> > Justin.
> 
> > On Wed, 3 Jan 2007, Henrik Krohns wrote:
> 
> >> 
> >> Hi, I whipped up a patch for policyd-weight-devel.
> >> 
> >> It adds p0f scoring support and greylisting (to be exact, user defined
> >> postfix action) by some rules.
> >> 
> >> There are some little details missing, p0f scoring does not affect other
> >> scores (maybe it would help) and greylisting decisions are not cached. I'm 
> >> a
> >> bit too busy to check it more, so I leave it up to Robert if he wants..
> >> 
> >> URL: http://hege.li/policyd-weight/greylist-p0f.diff
> >> 
> >> Cheers,
> >> Henrik
> >>
> 
> So far I'm lovin' it.
> 
> Jan  4 08:49:54 mail postfix/policydweight[3736]: weighted check:
>  NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5
>   NOT_IN_BL_NJABL=-1.5 CL_IP_NE_HELO=1.5
>RESOLVED_IP_IS_NOT_HELO=1.5 (check from:
> .itripipod. - helo: .localhost. - helo-domain: .localhost.)
>   FROM_NOT_FAILED_HELO(DOMAIN)=3 P0F_WINXP=2
>
>   <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>, rate: 3.5
>   
> Jan  4 08:49:54 mail postfix/policydweight[3736]: decided 
> action=check_greylist
> 
> Jan  4 08:49:54 mail postfix/smtpd[3733]: NOQUEUE: reject: RCPT from
>  ALyon-254-1-38-153.w86-193.abo.wanadoo.fr[86.193.177.153]: 450
>   <[EMAIL PROTECTED]>: Recipient address rejected:
>Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/example.com.html;
> from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
>  proto=SMTP helo=
> 
> ~
> Jan  4 12:27:20 mail postfix/policydweight[3617]: weighted check:
>  NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 IN_BL_NJABL=4.25
>   CL_IP_EQ_FROM_MX=-3.1 P0F_LINUX=-1 
><[EMAIL PROTECTED]>
><[EMAIL PROTECTED]>, rate: -2.85
> 
> Jan  4 12:27:20 mail postfix/policydweight[3617]: decided 
> action=check_greylist
> 
> Gary V
> 
> 
> Policyd-weight Mailinglist - http://www.policyd-weight.org/
> 


Policyd-weight Mailinglist - http://www.policyd-weight.org/


***SPAM*** ***SPAM*** Re: [Patch] p0f and selective greylisting

2007-01-04 Thread Gary V
Justin wrote:

> Yet another way to combat spam, very impressive!

> Justin.

> On Wed, 3 Jan 2007, Henrik Krohns wrote:

>> 
>> Hi, I whipped up a patch for policyd-weight-devel.
>> 
>> It adds p0f scoring support and greylisting (to be exact, user defined
>> postfix action) by some rules.
>> 
>> There are some little details missing, p0f scoring does not affect other
>> scores (maybe it would help) and greylisting decisions are not cached. I'm a
>> bit too busy to check it more, so I leave it up to Robert if he wants..
>> 
>> URL: http://hege.li/policyd-weight/greylist-p0f.diff
>> 
>> Cheers,
>> Henrik
>>

So far I'm lovin' it.

Jan  4 08:49:54 mail postfix/policydweight[3736]: weighted check:
 NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5
  NOT_IN_BL_NJABL=-1.5 CL_IP_NE_HELO=1.5
   RESOLVED_IP_IS_NOT_HELO=1.5 (check from:
.itripipod. - helo: .localhost. - helo-domain: .localhost.)
  FROM_NOT_FAILED_HELO(DOMAIN)=3 P0F_WINXP=2
   
  <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>, rate: 3.5
  
Jan  4 08:49:54 mail postfix/policydweight[3736]: decided action=check_greylist

Jan  4 08:49:54 mail postfix/smtpd[3733]: NOQUEUE: reject: RCPT from
 ALyon-254-1-38-153.w86-193.abo.wanadoo.fr[86.193.177.153]: 450
  <[EMAIL PROTECTED]>: Recipient address rejected:
   Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/example.com.html;
from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
 proto=SMTP helo=

~
Jan  4 12:27:20 mail postfix/policydweight[3617]: weighted check:
 NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 IN_BL_NJABL=4.25
  CL_IP_EQ_FROM_MX=-3.1 P0F_LINUX=-1 
   <[EMAIL PROTECTED]>
   <[EMAIL PROTECTED]>, rate: -2.85

Jan  4 12:27:20 mail postfix/policydweight[3617]: decided action=check_greylist

Gary V


Policyd-weight Mailinglist - http://www.policyd-weight.org/