From owner-freebsd-pf@FreeBSD.ORG  Mon Nov  6 04:34:57 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B37C316A417
	for <freebsd-pf@freebsd.org>; Mon,  6 Nov 2006 04:34:57 +0000 (UTC)
	(envelope-from dan@langille.org)
Received: from m21.unixathome.org (m21.unixathome.org [205.150.199.217])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4C41C43D4C
	for <freebsd-pf@freebsd.org>; Mon,  6 Nov 2006 04:34:57 +0000 (GMT)
	(envelope-from dan@langille.org)
Received: from localhost (localhost [205.150.199.217])
	by m21.unixathome.org (Postfix) with ESMTP id 58A3EBF8E;
	Sun,  5 Nov 2006 23:35:08 -0500 (EST)
Received: from m21.unixathome.org ([205.150.199.217])
	by localhost (m21.unixathome.org [205.150.199.217]) (amavisd-new,
	port 10024)
	with ESMTP id 14691-03; Sun, 5 Nov 2006 23:35:06 -0500 (EST)
Received: from bast.unixathome.org (bast.unixathome.org [70.26.229.230])
	by m21.unixathome.org (Postfix) with ESMTP id 16127BF16;
	Sun,  5 Nov 2006 23:35:05 -0500 (EST)
Received: from [10.55.0.99] (wocker.unixathome.org [10.55.0.99])
	by bast.unixathome.org (Postfix) with ESMTP id 0081EB854;
	Sun,  5 Nov 2006 23:34:53 -0500 (EST)
From: "Dan Langille" <dan@langille.org>
To: LI Xin <delphij@delphij.net>
Date: Sun, 05 Nov 2006 23:34:53 -0500
MIME-Version: 1.0
Message-ID: <454E751D.1748.31DF7116@dan.langille.org>
Priority: normal
In-reply-to: <454E646C.31658.319E3BBA@dan.langille.org>
References: <454E8C2A.8090301@delphij.net>
X-mailer: Pegasus Mail for Windows (4.31)
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Content-description: Mail message body
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at unixathome.org
Cc: freebsd-pf@freebsd.org
Subject: Re: whitelists clients still being greylisted
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Nov 2006 04:34:57 -0000

On 5 Nov 2006 at 22:23, Dan Langille wrote:

> On 6 Nov 2006 at 9:13, LI Xin wrote:
> 
> > Dan Langille wrote:
> > > Hi folks,
> > > 
> > > I'm setting up spamd with pf, and I'm finding that whitelisted IP 
> > > addresses are still being greylisted.  For example:
> > 
> > Er?  Have you mounted fdescfs as /dev/fd?  I think this should be
> > documented.
> 
> Hmmm, this is interesting... it is still greylisting that client.
> 
> My rules look right:

My rules were wrong.

> # pfctl -s nat
> No ALTQ support in kernel
> ALTQ related functions disabled
> rdr pass inet proto tcp from <spamd-mywhite> to 64.147.113.42 port = 

That should be <spamd-white>.  I changed it, and all seems well.

delo helped me spot that one.

> smtp -> 127.0.0.1 port 25
> rdr pass inet proto tcp from <spamd> to 64.147.113.42 port = smtp -> 
> 127.0.0.1 port 8025
> rdr pass inet proto tcp from ! <spamd-mywhite> to 64.147.113.42 port 
> = smtp -> 127.0.0.1 port 8025

-- 
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php