Re: Update: mail/greyscanner to version 2.00

2014-01-08 Thread Jan Stary
On Jan 07 17:06:52, skin...@britvault.co.uk wrote: If DNS_SOCK_MAX is defined in the config, greyscanner checks that the domain part of every sender has an A and an MX record, and blacklists everything else. That itself is surely a good thing, but: (2) I am getting a lot of false

Re: Update: mail/greyscanner to version 2.00

2014-01-08 Thread Craig R. Skinner
On 2014-01-08 Wed 16:04 PM |, Jan Stary wrote: This is what I'm talking about: there is an MX and A for 'gmail.com', plus this host resolves there and back, (and apparently is an outgoing smtp of google.com). Yet greyscanner blacklists it, with 'no MX or A for gmail.com'.

Re: Update: mail/greyscanner to version 2.00

2014-01-07 Thread Jan Stary
On Dec 29 19:18:07, h...@stare.cz wrote: On Dec 29 10:55:16, j...@bonetruck.org wrote: * Jim Razmus j...@bonetruck.org [131229 10:18]: I've just released greyscanner version 2.00. Notable changes include: -config file moved from /etc to /etc/mail -now runs with privilege

Re: Update: mail/greyscanner to version 2.00

2014-01-07 Thread Jan Stary
(1) the check performed is actually if ( $q[0]-qtype eq 'A' || $q[0]-qtype eq 'MX' ) i.e. a sender gets a pass if there was an A _or_ and MX for it Come to think of it, this might be intended. Some domains do have an MX for domain.org, and do not have an A for 'domain.org' - but do

Re: Update: mail/greyscanner to version 2.00

2014-01-07 Thread Jan Stary
Currently, the greyscanner manpage is generated by Pod::Man; Here is an mdoc(7) manpage and a diff that removes the doc from the actual Perl script. Jan .Dd $Mdocdate$ .Dt GREYSCANNER 1 .Os .Sh NAME .Nm greyscanner .Nd greytrapping daemon for spamd .Sh SYNOPSIS .Nm greyscanner .Sh

Re: Update: mail/greyscanner to version 2.00

2014-01-07 Thread Craig R. Skinner
On 2014-01-07 Tue 13:56 PM |, Jan Stary wrote: If DNS_SOCK_MAX is defined in the config, greyscanner checks that the domain part of every sender has an A and an MX record, and blacklists everything else. That itself is surely a good thing, but: (1) the check performed is actually

Re: Update: mail/greyscanner to version 2.00

2013-12-30 Thread Craig R. Skinner
On 2013-12-29 Sun 19:18 PM |, Jan Stary wrote: Works well for me. Me too, -- Craig Skinner | http://www.bbc.co.uk/programmes/b03mtrg9/clips

Update: mail/greyscanner to version 2.00

2013-12-29 Thread Jim Razmus
I've just released greyscanner version 2.00. Notable changes include: -config file moved from /etc to /etc/mail -now runs with privilege separation using the _greyscanner user Anyone using the external address checking feature should ensure those programs are executable by _greyscanner. The

Re: Update: mail/greyscanner to version 2.00

2013-12-29 Thread Jim Razmus
* Jim Razmus j...@bonetruck.org [131229 10:18]: I've just released greyscanner version 2.00. Notable changes include: -config file moved from /etc to /etc/mail -now runs with privilege separation using the _greyscanner user Anyone using the external address checking feature should ensure

Re: Update: mail/greyscanner to version 2.00

2013-12-29 Thread Jan Stary
On Dec 29 10:55:16, j...@bonetruck.org wrote: * Jim Razmus j...@bonetruck.org [131229 10:18]: I've just released greyscanner version 2.00. Notable changes include: -config file moved from /etc to /etc/mail -now runs with privilege separation using the _greyscanner user Anyone using