is per user whitelist/blacklist config and a default whitelist/blacklist possible?
Julian Field
mailscanner at ecs.soton.ac.uk
Thu Jun 26 19:41:05 IST 2003
The performance impact is minimal as it is all loaded once and then looked
up for each message.
At 18:30 26/06/2003, you wrote:
>Am I correct that these 3 lines are not needed if we are only checking
>for one TO address, since this is per user config?
>
>return 1 if $BlackWhite->{$todomain}{$from};
>return 1 if $BlackWhite->{$todomain}{$fromdomain};
>return 1 if $BlackWhite->{$todomain}{$ip};
>
>For example, I implemented this as a blacklist, including your
>suggestion for the default list:
>
># new lookup by email list
>sub LookupByEmailList {
> my($message, $BlackWhite) = @_;
> return 0 unless $message; # Sanity check the input
> # Find the "from" address and the first "to" address
> my($from, $fromdomain, @todomain, $todomain, @to, $to, $ip);
> $from = $message->{from};
> $fromdomain = $message->{fromdomain};
> @todomain = @{$message->{todomain}};
> $todomain = $todomain[0];
> @to = @{$message->{to}};
> $to = $to[0];
> $ip = $message->{clientip};
> # It is in the list if either the exact address is listed,
> # or the domain is listed
> return 1 if $BlackWhite->{$to}{$from};
> return 1 if $BlackWhite->{$to}{$fromdomain};
> return 1 if $BlackWhite->{$to}{$ip};
> return 1 if $BlackWhite->{'default'}{$from};
> return 1 if $BlackWhite->{'default'}{$fromdomain};
> return 1 if $BlackWhite->{'default'}{$ip};
> # It is not in the list
> return 0;
>}
>
>I'll let you know what kind of performance impact it has as we begin to
>build user white/blacklists. Am I correct that this all gets loaded into
>memory when MailScanner starts, and isn't reloaded unless MailScanner
>restarts?
>
>Thanks,
>Ken A.
>
>Julian Field wrote:
>
>>If, just after the "return 1" lines in "LookupByDomainList" in
>>CustomConfig.pm, you add
>> return 1 if $BlackWhite->{'default'}{$from};
>> return 1 if $BlackWhite->{'default'}{$fromdomain};
>> return 1 if $BlackWhite->{'default'}{$ip};
>>then it will look up things in the "default" black and white lists after it
>>checks the user and domain-specific ones.
>>
>>If you like, I'll add this to the standard distribution for you, it seems
>>like a handy idea.
>>
>>At 17:08 26/06/2003, you wrote:
>>
>>>I've tested the per user configs (see previous message below) and it
>>>seems to work okay. If anyone has any thoughts on this, I'd appreciate
>>>it.
>>>
>>>Next question: Is it possible to have a combination of per user AND a
>>>default system wide config for blacklist/whitelist rules, so that
>>>user at domain can whitelist and blacklist individual addresses or domains,
>>>but a default ruleset containing common whitelisted addresses is
>>>maintained for the server to allow standard stuff to come through
>>>untouched unless the use specifically blacklists it.
>>>Thanks,
>>>
>>>Ken A.
>>>
>>>
>>>>
>>>> From CustomConfig.pm:
>>>>
>>>># To enable these functions ....
>>>># Is Definitely Not Spam = &ByDomainSpamWhitelist
>>>># Is Definitely Spam = &ByDomainSpamBlacklist
>>>>
>>>>This gives you simple white blacklist functions for TO: *@somedomain.com
>>>
>>>
>>>>Is there any reason why it wouldn't be a good idea to extend this idea
>>>>to something like this:
>>>>
>>>>Is Definitely Not Spam = &ByEMailAddressSpamWhitelist
>>>>
>>>>That way, you would have full whitelist/blacklist capability on all
>>>>incoming email addresses, since each file would hold the list for a
>>>>single TO: address.
>>>>Thoughts?
>>>>
>>>>Thanks,
>>>>
>>>>Ken A.
>>
>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Professional Support Services at www.MailScanner.biz
>>MailScanner thanks transtec Computers for their support
>>
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
More information about the MailScanner
mailing list