Revisions for SendmailConfiguration
??changed:
-
See http://www.milter.org/ for more details and links about the Sendmail libmilter API
This page provides working open-source examples of currently available SIQ clients for Sendmail, as well as a link to details of the SIQ protocol.
<HR>
<B>Milter-SIQ</B> written in C by Anthony C Howe
<P>
http://www.milter.info/milter-siq/
<P>
"While SPF and designated sender schemes hold promise, they must be flanked by independent facts about the IP and domain - otherwise any spammer anywhere can self-declare his servers as trustable for his throwaway domains.
Fact-based services have arisen to fill this need, basing scores on the stability, identifiability, security and ownership longevity of domains and IP blocks. SIQ Protocol servers can thus aggregate such data along with SPF and white/black list results from a number of services, returning a score to milter-siq.
Milter-siq off-loads resource hungry processing to an off-site service which caches and aggregates worldwide data about outbound mail servers. Therefore, milter-siq is very lightweight, using only the resources necessary to send and receive a SIQ Protocol query, while providing a 0 to 100 score based on a large number of remotely cached and aggregated datapoints about the sending server IP address and MAIL FROM domain.
One service company already available to answer SIQ Protocol queries is the Outbound Index. Postmasters using milter-siq can program via a web interface at Outbound Index, how their SIQ queries will be processed through the Outbound Index. For example, which "checks" they want to run, and what score to give for pass or fail of each check, maybe left at the default settings or altered at will.
Milter-siq defaults to tagging messages in the subject and headers for use in sorting. After observing the results over time, you may also turn on rejecting below a certain score threshold. Caching of SIQ query responses is supported and caching parameters are adjustable to suit your traffic and preferences."
<P>
<HR>
<P>
<a NAME="PythonMilter"></a>
<b>Python Milter</b>
<P>
Here is the Sendmail Python milter we've been running on the servers in an 800-account ISP environment since July 2003. The milter sends a query for envelope-from, as described in the SIQ Protocol section. In default mode, this milter inserts header flags which may be used by subsequent milters to skip or invoke processing, as well as contribute to score-based systems or used to sort mail in the recipient email client. In rejecting mode, this milter uses the response to cause Sendmail to accept or reject the mail, adding the header flags to accepted mail.
<P>
<a href="http://outboundindex.org/3rdparty/siqmilter-1.1/readme.txt">Read Me</a> Installation and usage for the python milter.
<P>
<a href="http://outboundindex.org/3rdparty/copying.txt">GPLicense</a> for siqmilter.py
<P>
<a href="http://outboundindex.org/3rdparty/siqmilter-1.1/siqmilter.py.txt">View Source of siqmilter.py</a>
<P>
http://outboundindex.org/3rdparty/siqmilter-1.1.tar.gz Tarball
<P>
<a href="http://outboundindex.org/siqprotocol.html">SIQ (Server Index Query) protocol specification, 2004 IETF Internet Draft</a>
<P>
The setup.py provided by BMSI needs a slight modification to compile on debian:
ext_modules=[
Extension("milter", ["miltermodule.c"],libraries=libs,library_dirs=["/
usr/lib/libmilter"]),
],
The library_dirs part needs to be added
<HR>
If you get an error in the sendmail log such as:
NOQUEUE: SYSERR(root): /etc/mail/sendmail.cf: line 1774: Xsiqfilter: lo
cal socket name /home/milter/siqmilter.sock unsafe: Group writable directory
Then do: chmod 700 /home/milter and reload sendmail
<P>
<a href="#"><font color="blue" face="arial" size="2">Back to Top</font></a>
<P>
siq.py query client can run as a non-MTA connected query client from a Windows DOS prompt. Python 2.4 or better is required, as well as IPV6 support. (Yes, we said 2.FOUR.) See:
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/faqipv6.mspx
and
"The standard python interpreter (AKA CPython) natively supports IPv6, but unfortunately the binaries for Microsoft Windows available on the python.org website do not have compiled-in IPv6 support. However, starting from the upcoming 2.4 release of the python interpreter, the binaries for Microsoft Windows will be built with IPv6 support."
From unknown Sat Jan 8 23:10:51 -0500 2005
From:
Date: Sat, 08 Jan 2005 23:10:51 -0500
Subject: Mail Cruncher
Message-ID: <20050108231051-0500@wiki.outboundindex.net>
I read about MailCruncher in Prov. Business News and would ike to try it. The material above seems somewhat complex. I'm not sure that I can figure it out. My computer is an eMac. My mail system is customized for Macintosh. Can you help me with Mail Cruncher?
Penny Jackim. (Saunderstown, RI) Email: ahimsa@ids.net