Re: what penalty?

2007-09-19 Thread Robert Felber
On Wed, Sep 19, 2007 at 09:56:48AM +0100, Riaan Kok wrote:
>Hi there,
> 
>On 18/09/2007, Robert Felber <[EMAIL PROTECTED]> wrote:
> 
>  On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote:
>  > -
>  > decided action=550 temporarily blocked because of previous errors -
>  > retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient
>  > mail)
>  > -
>  >
>  > I checked the log and was not able to find the "previous errors". What
>  > event can cause this message
> 
>  This message is caused when a previous validation of the client,sender
>  already lead to a reject.
> 
>So, this message is seen when a cached negative client crosses a threshold
>of attempts within a time period?
>Is it "right" to use a 550-don't-try-again action here with no regard to
>the actions that has been applied to this client before?

No it is not. Has been changed in 0.1.14 beta-10. Clients which were
rejected with 4xx|DEFER_* are not cached anymore. You need to restart
the cache if you have clients which were 4xx deferred in the cache.

Note: polw users which made use of DEFER_ACTION, DEFER_LEVEL and DEFER_STRING
do not need to worry. For those the results where not cached.
I.e. this affects only users which said DEFER_* or 4xx in REJECTMSG and
MAXDNSBLMSG.

However - the OP didn't provide all logs regarding the rejected IP so
we are left assuming.

>What's the thinking behind choosing between 450s and 550s in
>policyd-weight?

Be more specific?


-- 
Robert Felber (PGP: 896CF30B)
Munich, Germany


Policyd-weight Mailinglist - http://www.policyd-weight.org/


Re: what penalty?

2007-09-19 Thread Riaan Kok
Hi there,

On 18/09/2007, Robert Felber <[EMAIL PROTECTED]> wrote:
>
> On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote:
> > -
> > decided action=550 temporarily blocked because of previous errors -
> > retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient
> > mail)
> > -
> >
> > I checked the log and was not able to find the "previous errors". What
> > event can cause this message
>
> This message is caused when a previous validation of the client,sender
> already lead to a reject.
>

So, this message is seen when a cached negative client crosses a threshold
of attempts within a time period?
Is it "right" to use a 550-don't-try-again action here with no regard to the
actions that has been applied to this client before?  I don't see this line
in the sample configuration file as "recommended to be modified"..

What's the thinking behind choosing between 450s and 550s in policyd-weight?

my regards,
Riaan


Re: what penalty?

2007-09-18 Thread Robert Felber
On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote:
> Hi there,
> 
> we are running "policyd-weight version: 0.1.14 beta, CacheVer: 3" and
> from time to time we have this message in our logs

Outdated.

> -
> decided action=550 temporarily blocked because of previous errors -
> retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient
> mail)
> -
> 
> I checked the log and was not able to find the "previous errors". What
> event can cause this message

This message is caused when a previous validation of the client,sender
already lead to a reject.

> and is "(multirecipient mail)" of any
> relevance?


The client tried to send multirecipient mail which was already rejected
for the previous rcpt in the same session. Only for information to see whether
we treat multirecipient mail correctly.


-- 
Robert Felber (PGP: 896CF30B)
Munich, Germany


Policyd-weight Mailinglist - http://www.policyd-weight.org/