Greylisting!

Hello!
I want to install greylisting. Does Virtualmin support it in the first place?
Anyway, I see there is postgrey and postfix-gld. I believe postfix-gld is the best one, but what do you think?
Anyone successfully installed Greylisting on a Virtualmin system here?
Hal

Howdy Hal,

Virtualmin doesn’t deal with greylisting yet. But we plan to include a policy daemon in the near future to handle it, plus some other niceties (like SPF).

The problem is that the daemon we’d pretty much settled on (policyd-weight) has been abandoned by its developer. It’s Open Source and written in Perl, so we’re considering adopting it…but we’re hesitant to take on more development tasks until we can hire a few people to help out.

Anyway, we’ll figure something out soon, but in the meantime, feel free to add a policy daemon of your choice–the nice thing about a policy daemon is that it’s really easy to switch between different ones, and since there is not “per-user” or “per-domain” possibilities, configuration is dead simple for most of them.

i have postfix-gld running on debian, and it works like a charm :slight_smile:

Has postfix-policyd been incorporated into Virtualmin?

Not yet, unfortunately!

Joe has been murmuring about some form of greylisting integration for a little while now, but I don’t think he’s nailed down which one specifically.

Indeed, I’m looking forward to that as well :slight_smile:
-Eric

I’m running postfix-policyd…have been for some time.
It is working fairly well, but I would like to see the options to opt out, whitelist, restart the service, etc, added in.
I’ll keep hoping…

Well, just to make sure the appropriate people see it – as your opinion matters (and is bumped up a few notches by being a paying customer :slight_smile: – I’d suggest filing a feature request in the Bugs and Issues tracker.

Sometimes, an item can be on the todo list – but it’s easy to keep something on the back burner when few people are bringing it up.

Thanks,
-Eric

yeah that would be an awesome feature to be integrated into virtualmin.
i would vote for it :slight_smile:

Indications for Centos:

http://wiki.centos.org/HowTos/postgrey
http://blog.sekiur.com/2008/09/setting-up-a-mail-relay-on-centos-5/


  • Installing Postgrey

yum install postgrey

  • Configuring Postgrey

Edit /etc/postfix/main.cf and add the following to smtpd_recipient_restrictions.

permit_mynetworks,
reject_unauth_destination,
reject_unlisted_recipient,
check_policy_service unix:postgrey/socket

check_policy_service unix:postgrey/socket performs the greylisting while adding reject_unlisted_recipient before it enables Postfix to immediately reject unknown recipients instead of having clients go through the greylisting process before being informed that the recipient does not exist.

To disable greylisting for certain IP addresses or hostnames, add the IP address, hostname or regular expression to match hostnames into the file /etc/postfix/postgrey_whitelist_clients.local.

Hostnames are identified by performing a reverse DNS on the clientâ

Indications for Centos:

http://wiki.centos.org/HowTos/postgrey
http://blog.sekiur.com/2008/09/setting-up-a-mail-relay-on-centos-5/


  • Installing Postgrey

yum install postgrey

  • Configuring Postgrey

Edit /etc/postfix/main.cf and add the following to smtpd_recipient_restrictions.

permit_mynetworks,
reject_unauth_destination,
reject_unlisted_recipient,
check_policy_service unix:postgrey/socket

check_policy_service unix:postgrey/socket performs the greylisting while adding reject_unlisted_recipient before it enables Postfix to immediately reject unknown recipients instead of having clients go through the greylisting process before being informed that the recipient does not exist.

To disable greylisting for certain IP addresses or hostnames, add the IP address, hostname or regular expression to match hostnames into the file /etc/postfix/postgrey_whitelist_clients.local.

Hostnames are identified by performing a reverse DNS on the clientâ

Since May 14th 2009 postgrey/greylisting has been added to Virtualmin 3.69+

Greylisting using Postgrey can now be setup using Virtualmin, via the new Email Greylisting page. In addition, whitelists for SMTP servers and email recipents can be managed. This feature was ported from the Pro version.

Source at http://webmin.com/vchanges.html

For the documentation navigate to VIrtualmin > Email Messages > Email Greylisting. Following the instructions on that page and click on the question mark “?” button for online documentation.