Re: what penalty?
On Wed, Sep 19, 2007 at 09:56:48AM +0100, Riaan Kok wrote: >Hi there, > >On 18/09/2007, Robert Felber <[EMAIL PROTECTED]> wrote: > > On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote: > > - > > decided action=550 temporarily blocked because of previous errors - > > retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient > > mail) > > - > > > > I checked the log and was not able to find the "previous errors". What > > event can cause this message > > This message is caused when a previous validation of the client,sender > already lead to a reject. > >So, this message is seen when a cached negative client crosses a threshold >of attempts within a time period? >Is it "right" to use a 550-don't-try-again action here with no regard to >the actions that has been applied to this client before? No it is not. Has been changed in 0.1.14 beta-10. Clients which were rejected with 4xx|DEFER_* are not cached anymore. You need to restart the cache if you have clients which were 4xx deferred in the cache. Note: polw users which made use of DEFER_ACTION, DEFER_LEVEL and DEFER_STRING do not need to worry. For those the results where not cached. I.e. this affects only users which said DEFER_* or 4xx in REJECTMSG and MAXDNSBLMSG. However - the OP didn't provide all logs regarding the rejected IP so we are left assuming. >What's the thinking behind choosing between 450s and 550s in >policyd-weight? Be more specific? -- Robert Felber (PGP: 896CF30B) Munich, Germany Policyd-weight Mailinglist - http://www.policyd-weight.org/
Re: what penalty?
Hi there, On 18/09/2007, Robert Felber <[EMAIL PROTECTED]> wrote: > > On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote: > > - > > decided action=550 temporarily blocked because of previous errors - > > retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient > > mail) > > - > > > > I checked the log and was not able to find the "previous errors". What > > event can cause this message > > This message is caused when a previous validation of the client,sender > already lead to a reject. > So, this message is seen when a cached negative client crosses a threshold of attempts within a time period? Is it "right" to use a 550-don't-try-again action here with no regard to the actions that has been applied to this client before? I don't see this line in the sample configuration file as "recommended to be modified".. What's the thinking behind choosing between 450s and 550s in policyd-weight? my regards, Riaan
Re: what penalty?
On Tue, Sep 18, 2007 at 04:37:14PM +0200, Michael Mertel wrote: > Hi there, > > we are running "policyd-weight version: 0.1.14 beta, CacheVer: 3" and > from time to time we have this message in our logs Outdated. > - > decided action=550 temporarily blocked because of previous errors - > retrying too fast. penalty: 30 seconds x 1 retries. (multirecipient > mail) > - > > I checked the log and was not able to find the "previous errors". What > event can cause this message This message is caused when a previous validation of the client,sender already lead to a reject. > and is "(multirecipient mail)" of any > relevance? The client tried to send multirecipient mail which was already rejected for the previous rcpt in the same session. Only for information to see whether we treat multirecipient mail correctly. -- Robert Felber (PGP: 896CF30B) Munich, Germany Policyd-weight Mailinglist - http://www.policyd-weight.org/
