Greylist issues with IPv6

[glemme]

Somehow greylisting does not work properly when running IPv6.

the sending server is acting correctly and tries to resubmit the message but still keeps on being greylisted.

Have disabled IPv6 for now to solve it. But would like to have it on and still have grey listing working.

[glemme]

And to follow up on myself.

I tried whitelisting IPv6 senders. But still ended up in greylist.

[hunter-nl]

This is because the used ipv6 non EUI64 addresses the mailservers using. Like google mailservers uses many many many unique non EUI64 ipv6 addresses. And then it takes a very long time to get through the greylisting...

You can patch this by change the following function in /usr/sbin/sqlgrey

Code: Select all

sub ipv6_smart($) {
    my $addr = ipv6_normalise(shift);
    if (ipv6_is_eui64($addr) and ipv6_is_global_unicast($addr)) {
        ## For EUI64 return just the prefix/64
        return join(":", (split(/:/, $addr))[0..3]);
    } else {
        ## For Non-EUI64 or Non-Global-Unicast return the address
        return $addr;
    }
}

Into (see the else section for the difference )

Code: Select all

sub ipv6_smart($) {
    my $addr = ipv6_normalise(shift);
    if (ipv6_is_eui64($addr) and ipv6_is_global_unicast($addr)) {
        ## For EUI64 return just the prefix/64
        return join(":", (split(/:/, $addr))[0..3]);
    } else {
        ## For Non-EUI64 or Non-Global-Unicast return the address
        #return $addr;
        return join(":", (split(/:/, $addr))[0..3]);
    }
}

It will now whitelist IPv6 /64 prefixes instead of each unique non EUI64 ipv6 /128 address.

[pdwalker]

shawniverson, is this a change that should be pushed up to the sqlgrey folks?

[shawniverson]

https://github.com/E-F-A/v4/issues/204