[117434] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Repeated Blacklisting / IP reputation

daemon@ATHENA.MIT.EDU (James Cloos)
Sat Sep 12 17:07:41 2009

From: James Cloos <cloos@jhcloos.com>
To: Joe Greco <jgreco@ns.sol.net>
In-Reply-To: <200909081934.n88JYAS9093038@aurora.sol.net> (Joe Greco's message
	of "Tue, 8 Sep 2009 14:34:10 -0500 (CDT)")
Date: Sat, 12 Sep 2009 17:05:57 -0400
Cc: bmanning@vacation.karoshi.com, "nanog@nanog.org" <nanog@nanog.org>,
	John Curran <jcurran@arin.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

>>>>> "Joe" == Joe Greco <jgreco@ns.sol.net> writes:

Joe> Show me ONE major MTA which allows you to configure an expiration
Joe> for an ACL entry.

Any MTA which supports using an sql db as its backend.  Postfix is a
fine example.

You just define the table and the query to either have an until column,
or have a column with the timestamp of when the entry was added and have
the query ignore rows which are older than some given time.

And with postfix, using its sql proxy capability, using a sql backend is
fully performant.

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 1024D/ED7DAEA6


home help back first fref pref prev next nref lref last post