[exim] Fwd: Greylisting and Whitelisting

Hi there,

i am unsure if my question reached the list (as i didn't receive a list
copy) so i re-send the whole thing.

Thanks in advance

Patrick Schönfeld

-------- Forwarded message --------
Betreff: Greylisting and Whitelisting
Datum: Thu, 29 Jun 2006 13:20:17 +0200
Von: schönfeld / in-medias-res <schoenfeld@???>
An: exim-users@???

Hi there,

i experimental tried to use greylisting on our mailhub to see how it
does. But currently it is failing miserable, because it seems to ignore
(manual made) whitelist entries. I don't know why cause i tried several
variants i found in internet.

So here is the (current) relevant acl_check_rcpt part:

begin acl
acl_check_rcpt:

   accept
         authenticated = *

         domains     = +local_domains : +relay_to_domains
   defer
         !hosts      = /etc/greylistd/whitelist-hosts
         !domains    = /etc/greylistd/whitelist-hosts

         message     = $sender_host_address is not yet authorized to
deliver mail \
                       from <$sender_address> to <$local_part@$domain>. \
                      Please try later.
     log_message = greylisted.
     !senders    = :
     domains     = +local_domains : +relay_to_domains
#   verify      = recipient/callout=20s,defer_ok
     set acl_m9  = $sender_host_address $sender_address $local_part@$domain
     set acl_m9  = ${readsocket{/var/run/greylistd/socket}{$acl_m9}{5s}{}{}}
     condition   = ${if eq {$acl_m9}{grey}{true}{false}}

And here are the first lines (except #-commented lines) of the
/etc/greylistd/whitelist-hosts:

*.ibm.com
*.exim.org

127.0.0.1 # Of course we don't want to delay ourselves or local users
192.168 # Don't delay our private networks either
212.202.160 # IMR
195.135. # KOLN
193.158.225.*
193.158.225.5
193.158.225 #ECAN

Mainly it does not work on IP-adresses. Especially those who are
wildcarded or partially specified in the list.

How can i resolve this?

Thanks in advance
Patrick Schönfeld