688
edits
Changes
Jump to navigation
Jump to search
Line 85:
Line 85: − ==== [[#___top|remote_ip <bool>]] ===+ − ==== [[#___top|sender <bool>]] ===+ − ==== [[#___top|recipient <bool>]] ===+ − ==== [[#___top|deny_late <bool>]] ===+ − ==== [[#___top|black_timeout <timeout_seconds>]] ===+ − ==== [[#___top|white_timeout <timeout_seconds>]] ===+ − ==== [[#___top|reject <bool>]] ===+ Line 115:
Line 115: − ==== [[#___top|db_dir <path>]] ===+ Line 125:
Line 125: − ==== [[#___top|redis <host[:port]>]] ===+ Line 133:
Line 133: − ==== [[#___top|per_recipient <bool>]] ===+ − ==== [[#___top|nfslock <bool>]] ===+ − ==== [[#___top|p0f]] ===+ Line 151:
Line 151: − ==== [[#___top|geoip]] ===+ Line 158:
Line 158: − ==== [[#___top|loglevel]] ===+
remove extra '=' inserted at '===' heading level by perldoc conversion
The following parameters can be passed to greylisting:
The following parameters can be passed to greylisting:
=== [[#___top|remote_ip <bool>]] ===
Include the remote ip in the connection triplet? Default: 1
Include the remote ip in the connection triplet? Default: 1
=== [[#___top|sender <bool>]] ===
Include the sender in the connection triplet? Default: 0.
Include the sender in the connection triplet? Default: 0.
=== [[#___top|recipient <bool>]] ===
Include the recipient in the connection triplet? Default: 0.
Include the recipient in the connection triplet? Default: 0.
=== [[#___top|deny_late <bool>]] ===
Whether to defer denials during the 'mail' hook or later during 'data_post' e.g. to allow per-recipient logging. Default: 0.
Whether to defer denials during the 'mail' hook or later during 'data_post' e.g. to allow per-recipient logging. Default: 0.
=== [[#___top|black_timeout <timeout_seconds>]] ===
The initial period during which we issue DENYSOFTs for connections from an unknown (or timed out) 'connection triplet'. Default: 50 minutes.
The initial period during which we issue DENYSOFTs for connections from an unknown (or timed out) 'connection triplet'. Default: 50 minutes.
=== [[#___top|white_timeout <timeout_seconds>]] ===
The period after which a known connection triplet will be considered stale, and we will issue DENYSOFTs again. New deliveries reset the timestamp on the address and renew this timeout. Default: 36 days.
The period after which a known connection triplet will be considered stale, and we will issue DENYSOFTs again. New deliveries reset the timestamp on the address and renew this timeout. Default: 36 days.
=== [[#___top|reject <bool>]] ===
Whether to issue deferrals (DENYSOFT) for black connections. Having reject disabled is useful for seeding the database and testing without impacting deliveries. It is recommended to begin with ''reject 0'' for a week or two before enabling ''reject''.
Whether to issue deferrals (DENYSOFT) for black connections. Having reject disabled is useful for seeding the database and testing without impacting deliveries. It is recommended to begin with ''reject 0'' for a week or two before enabling ''reject''.
Default: 1
Default: 1
=== [[#___top|db_dir <path>]] ===
Path to a directory in which the greylisting DB will be stored. This directory must be writable by the qpsmtpd user. By default, the first usable directory from the following list will be used:
Path to a directory in which the greylisting DB will be stored. This directory must be writable by the qpsmtpd user. By default, the first usable directory from the following list will be used:
''BINDIR''/config
''BINDIR''/config
=== [[#___top|redis <host[:port]>]] ===
Location of redis server where the greylisting DB will be stored.
Location of redis server where the greylisting DB will be stored.
When Redis is in use, this plugin will wait up to 1 second to connect; when Redis is unavailable, clients will not be greylisted.
When Redis is in use, this plugin will wait up to 1 second to connect; when Redis is unavailable, clients will not be greylisted.
=== [[#___top|per_recipient <bool>]] ===
Flag to indicate whether to use per-recipient configs.
Flag to indicate whether to use per-recipient configs.
=== [[#___top|nfslock <bool>]] ===
Flag to indicate the database is stored on NFS. Uses File::NFSLock instead of flock.
Flag to indicate the database is stored on NFS. Uses File::NFSLock instead of flock.
=== [[#___top|p0f]] ===
Enable greylisting only when certain p0f criteria is met. The required argument is a comma delimited list of key/value pairs. The keys are the following p0f TCP fingerprint elements: genre, detail, uptime, link, and distance.
Enable greylisting only when certain p0f criteria is met. The required argument is a comma delimited list of key/value pairs. The keys are the following p0f TCP fingerprint elements: genre, detail, uptime, link, and distance.
<pre> greylisting p0f genre,windows,link,dsl,distance,3</pre>
<pre> greylisting p0f genre,windows,link,dsl,distance,3</pre>
=== [[#___top|geoip]] ===
Do not greylist connections that are in the comma separated list of countries.
Do not greylist connections that are in the comma separated list of countries.
Prior to adding GeoIP support, I greylisted all connections from windows computers. That deters the vast majority of spam connections, but it also delays legit mail from @msn, @live.com, and a small handful of other servers. Since adding geoip support, I haven't seen a single valid mail delivery delayed.
Prior to adding GeoIP support, I greylisted all connections from windows computers. That deters the vast majority of spam connections, but it also delays legit mail from @msn, @live.com, and a small handful of other servers. Since adding geoip support, I haven't seen a single valid mail delivery delayed.
=== [[#___top|loglevel]] ===
Adjust the quantity of logging for this plugin. See docs/logging.pod
Adjust the quantity of logging for this plugin. See docs/logging.pod