> Something I am struggling with is trying to implement a policy for no > greylisting if sending IP address matches a list of reverse DNS names > > I have made 2 policies > - No_Greylisting (priority 10) > - All_Mail (priority 20) > > The No_Greylisting policy has a member list of source = > %No_Greylist_Clients and destination = any > > The No_Greylist_Clients group has a member of > *.bullet.mail.sp1.yahoo.com > > The All_Mail policy has a member list of source = any and destination = any > > In the cbpolicyd logs I see > [2009/06/22-17:53:19 - 14188] [CBPOLICYD] DEBUG: Starting up caching engine > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:1/Name:Default]: > Source matching result: matched=1 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:2/Name:Default > Outbound]: Source matching result: matched=0 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:3/Name:Default > Inbound]: Source matching result: matched=1 > [2009/06/22-17:53:19 - 14154] [POLICIES] DEBUG: [ID:3/Name:Default > Inbound]=>(group:internal_domains): Destination group result: matched=0 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:4/Name:Default > Internal]: Source matching result: matched=0 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:5/Name:Test]: Source > matching result: matched=0 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: > [ID:7/Name:No_Greylisting]: Source matching result: matched=1 > [2009/06/22-17:53:19 - 14154] [POLICIES] INFO: [ID:8/Name:All_Mail]: > Source matching result: matched=1 > [2009/06/22-17:53:19 - 14154] [CHECKHELO] DEBUG: Updated timestamp for > helo 'n49a.bullet.mail.sp1.yahoo.com' from address '66.163.168.143' > [2009/06/22-17:53:19 - 14154] [CHECKSPF] DEBUG: SPF result: > returns.groups.yahoo.com: No applicable sender policy available > > So it is matching No_Greylisting and All_Mail policies > > Now the greylisting module has 2 settings > Policy = No_Greylisting sets "Use Greylisting" to No > Policy = All_Mail sets "Use Greylisting" to Yes > > The email above still gets greylisted by cbpolicyd > > > Doesn't the No_GreyListing policy get triggered since it has a lower > priority than All_Mail and stop the email from being greylisted? > > Do I have set All_Mail to source = !%No_Greylist_Clients to get this to > work? > > http://www.policyd.org/tiki-index.php?page=Policies %26 Groups&structure=Documentation
"Priorities are processed in an ascending fashion, this means that 0 will be processed before 1 and 10 before 20." So in terms of overriding the greylisting (as it supports inheriting aswell) you'd need to have your default policy with a lower priority than your policy which overrides the default. For instance one can have... 10 - Default (greylisting attached, set to YES) 70 - Client1 (does not like greylisting, UseGreylisting set to NO) Regards Nigel _______________________________________________ Users mailing list [email protected] http://lists.policyd.org/mailman/listinfo/users
