#
# Simple greylisting config file using the new features
# See greylist2.conf for a more detailed list of available options
#
# $Id: greylist.conf,v 1.37.2.2 2006/09/27 20:03:24 manu Exp $
#

pidfile "/var/run/milter-greylist.pid"
socket "/var/run/milter-greylist/milter-greylist.sock"
dumpfile "/var/lib/milter-greylist/greylist.db"
dumpfreq 10m
geoipdb "/usr/share/GeoIP/GeoIP.dat"

# Log milter-greylist activity to a file
#stat ">>/var/milter-greylist/greylist.log" \
#      "%T{%Y/%m/%d %T} %d [%i] %r -> %f %S (ACL %A) %Xc %Xe %Xm %Xh\n"
# Same, sent to syslog
stat "|logger -p mail.info" \
"%T{%Y/%m/%d %T} %d [%i] %r -> %f %S (ACL %A) %Xc %Xe %Xm %Xh\n"

user "greylist"

###see default/milter-greylist
# Be verbose (or use -v flag)
verbose

# Do not tell spammer how long they have to wait
#quiet

#how long#von 10 auf 1 mal runter wg google - beobachten
greylist 1m
autowhite 2d
timeout 5d


#header einfuegen
report all

# MX peering
#peer 192.0.2.17
#peer 192.0.2.18

# Your own network, which should not suffer greylisting
list "my network" addr { 127.0.0.1/8 212.114.32.0/24 212.114.33.0/24 212.114.34.0/24 212.114.35.0/24 212.114.36.0/24 212.114.37.0/24 }

list "isfun-ausnahmen" addr { 	82.135.43.2/32 \
				64.18.2.0/24 \ # romanco mailserver
				92.51.185.68/32 \ # markt+technik mailserver
				217.7.205.63/32 \ # ifoton mailserver
				91.210.225.56/24 \ #spexlift server
}

# Your MXes and Mailforwardinghosts, Mailinglistsproviders, which you don'T
# want to piss off.
list "my friends" addr {   \
	70.103.162.0/24	   \ # Debian Mail+Listservers. NEVER unwhitelist them. 
	140.211.166.0/24   \ # Debian Bugs
	192.25.206.0/24    \ # Debian web/cvs/people
	194.109.137.218/32 \ # Debian security/www-master.d.o
	}

# This is a list of broken MTAs that break with greylisting. Derived from
# http://cvs.puremagic.com/viewcvs/greylisting/schema/whitelist_ip.txt?rev=1.16
list "broken mta" addr {   \
	12.5.136.141/32    \ # Southwest Airlines (unique sender)
	12.5.136.142/32    \ # Southwest Airlines
	12.5.136.143/32    \ # Southwest Airlines
	12.5.136.144/32    \ # Southwest Airlines
	12.107.209.244/32  \ # kernel.org (unique sender)
	12.107.209.250/32  \ # sourceware.org (unique sender)
	63.82.37.110/32    \ # SLmail
	63.169.44.143/32   \ # Southwest Airlines
	63.169.44.144/32   \ # Southwest Airlines
	64.7.153.18/32     \ # sentex.ca (common pool)
	64.12.136.0/24     \ # AOL (common pool)
	64.12.137.0/24     \ # AOL
	64.12.138.0/24     \ # AOL
	64.124.204.39      \ # moveon.org (unique sender)
	64.125.132.254/32  \ # collab.net (unique sender)
	66.94.237.16/28    \ # Yahoo Groups servers (common pool)
	66.94.237.32/28    \ # Yahoo Groups servers (common pool)
	66.94.237.48/30    \ # Yahoo Groups servers (common pool)
	66.100.210.82/32   \ # Groupwise?
	66.135.192.0/19    \ # Ebay
	66.162.216.166/32  \ # Groupwise?
	66.206.22.82/32    \ # Plexor
	66.206.22.83/32    \ # Plexor
	66.206.22.84/32    \ # Plexor
	66.206.22.85/32    \ # Plexor
	66.218.66.0/23     \ # Yahoo Groups servers (common pool)
	66.218.67.0/23     \ # Yahoo Groups servers (common pool)
	66.218.68.0/23     \ # Yahoo Groups servers (common pool)
	66.218.69.0/23     \ # Yahoo Groups servers (common pool)
	66.27.51.218/32    \ # ljbtc.com (Groupwise)
	152.163.225.0/24   \ # AOL
	194.245.101.88/32  \ # Joker.com
	195.235.39.19/32   \ # Tid InfoMail Exchanger v2.20
	195.238.2.0/24     \ # skynet.be (wierd retry pattern, common pool)
	195.238.3.0/24     \ # skynet.be
	195.46.220.208/32  \ # mgn.net
	195.46.220.209/32  \ # mgn.net
	195.46.220.210/32  \ # mgn.net
	195.46.220.211/32  \ # mgn.net
	195.46.220.221/32  \ # mgn.net
	195.46.220.222/32  \ # mgn.net
	195.238.2.0/24     \ # skynet.be (wierd retry pattern)
	195.238.3.0/24     \ # skynet.be
	204.107.120.10/32  \ # Ameritrade (no retry)
	205.188.0.0/16     \ # AOL
	205.206.231.0/24   \ # SecurityFocus.com (unique sender)
	207.115.63.0/24    \ # Prodigy - retries continually
	207.171.168.0/24   \ # Amazon.com
	207.171.180.0/24   \ # Amazon.com
	207.171.187.0/24   \ # Amazon.com
	207.171.188.0/24   \ # Amazon.com
	207.171.190.0/24   \ # Amazon.com
	209.132.176.174/32 \ # sourceware.org mailing lists (unique sender)
	211.29.132.0/24    \ # optusnet.com.au (wierd retry pattern)
	213.136.52.31/32   \ # Mysql.com (unique sender)
	216.33.244.0/24    \ # Ebay
	217.158.50.178/32  \ # AXKit mailing list (unique sender)
	213.199.144.0/20  \ # Mickeysoft datacenter london
	157.56.0.0/14 \      #msoutlook
	157.60.0.0/16 \      #msoutlook
	157.54.0.0/15 \      #msoutlook
	198.2.128.0/24 \      #google
	198.2.132.0/22 \      #google
	198.2.136.0/23 \      #google
	198.2.186.0/23 \      #google
	205.201.131.128/25 \      #google
	205.201.134.128/25 \      #google
	205.201.136.0/23 \      #google
	205.201.139.0/24 \      #google
	64.18.0.0/20 \      #google
	64.233.160.0/19 \      #google
	66.102.0.0/20 \      #google
	66.249.80.0/20 \      #google
	72.14.192.0/18 \      #google
	74.125.0.0/16 \      #google
	173.194.0.0/16 \      #google
	207.126.144.0/20 \      #google
	209.85.128.0/17 \      #google
	216.58.192.0/19 \      #google
	216.239.32.0/19 \      #google
	123.125.66.0/24 \      #baidu
	220.181.5.0/24 \      #baidu
	61.135.168.0/24 \      #baidu
	180.76.1.189/30 \      #baidu
	162.248.201.162/31 \      #baidu
	115.239.212.0/24 \      #baidu
	58.217.202.0/24 \      #baidu
	61.135.162.0/23 \      #baidu
	105.203.253.66/27 \      #baidu
	220.181.51.128/25 \      #baidu
	194.127.3.34/32 \          #allianz
	194.127.3.35/32 \          #allianz
	207.46.101.128/26 \	#protection.outlook.com
	207.46.100.0/24 \	#protection.outlook.com
	207.46.163.0/24 \	#protection.outlook.com
	65.55.169.0/24 \	#protection.outlook.com
	157.56.110.0/23 \	#protection.outlook.com
	157.55.234.0/24 \	#protection.outlook.com
	213.199.154.0/24 \	#protection.outlook.com
	213.199.180.0/24 \	#protection.outlook.com
	157.56.112.0/24 \	#protection.outlook.com
	207.46.51.64/26 \	#protection.outlook.com
	157.55.158.0/23 \	#protection.outlook.com
	64.4.22.64/26 \		#protection.outlook.com
	40.92.0.0/14 \		#protection.outlook.com
	40.107.0.0/17 \		#protection.outlook.com
	40.107.128.0/18 \	#protection.outlook.com
	134.170.140.0/24 \	#protection.outlook.com
	23.103.128.0/19 \	#protection.outlook.com
	23.103.198.0/23 \	#protection.outlook.com
	65.55.88.0/24 \		#protection.outlook.com
	104.47.0.0/17 \		#protection.outlook.com
	23.103.200.0/21 \	#protection.outlook.com
	23.103.208.0/21 \	#protection.outlook.com
	23.103.191.0/24 \	#protection.outlook.com
	216.32.180.0/23 \	#protection.outlook.com
	94.245.120.64/26 \	#protection.outlook.com
	108.175.18.45 		\ #paypal
	108.175.30.45 		\ #paypal
	12.130.86.238 		\ #paypal
	129.41.77.70 		\ #paypal
	157.151.208.65 		\ #paypal
	173.0.84.224/28 	\ #paypal
	173.0.94.244/30 	\ #paypal
	173.224.160.128/25 	\ #paypal
	173.224.161.128/25 	\ #paypal
	193.28.178.0/25 	\ #paypal
	194.64.234.129 		\ #paypal
	198.178.234.57 		\ #paypal
	204.13.11.48/29 	\ #paypal
	204.92.114.187 		\ #paypal
	206.165.246.80/29 	\ #paypal
	206.25.247.143 		\ #paypal
	208.201.241.163 	\ #paypal
	208.40.232.70 		\ #paypal
	208.64.132.0/22 	\ #paypal
	208.85.50.137 		\ #paypal
	209.46.117.179 		\ #paypal
	209.67.98.46 		\ #paypal
	216.113.160.0/24 	\ #paypal
	216.113.172.0/25 	\ #paypal
	216.113.175.0/24 	\ #paypal
	216.136.162.120/29 	\ #paypal
	216.136.162.65 		\ #paypal
	216.136.168.80/28 	\ #paypal
	216.136.168.81 		\ #paypal
	54.241.16.209 		\ #paypal
	54.244.242.0/24 	\ #paypal
	63.80.14.0/23 		\ #paypal
	64.127.115.252 		\ #paypal
	65.110.161.77 		\ #paypal
	65.212.180.36 		\ #paypal
	66.211.168.230/31 	\ #paypal
	67.221.168.65 		\ #paypal
	67.72.99.26 		\ #paypal
	74.112.67.243 		\ #paypal
	81.223.46.0/27 		\ #paypal
	8.20.114.31 		\ #paypal
	213.165.64.0/23 	\ #gmx
	74.208.5.64/26 		\ #gmx
	212.227.126.128/25 	\ #gmx
	212.227.15.0/25 	\ #gmx
	212.227.17.0/27 	\ #gmx
	74.208.4.192/26 	\ #gmx
	82.165.159.0/24 	\ #gmx
	217.72.207.0/27 	\ #gmx
	213.61.69.122/32 	\ # fcb
	193.169.180.0/23 	\ # fcb
	91.229.178.0/23 	\ # fcb
	212.45.106.160/27 	\ # fcb
	91.241.72.0/22 		\ # fcb
	192.166.192.189		\ #strato
	217.74.205.128		\ #strato
	46.243.88.0/24		\ #secure-mailgate.com
	128.127.70.0/26		\ #secure-mailgate.com
	89.22.108.0/24		\ #secure-mailgate.com
	192.162.87.0/24		\ #secure-mailgate.com
	109.237.142.0/24		\ #secure-mailgate.com
	91.210.225.0/24 \
	91.210.225.56/24 \
}

# List of users that want greylisting
list "grey users" rcpt {  \
	user1@example.com \
	user2@example.com \
	user3@example.com \
}

list "whitelist addresses" from {  \
	/gevers96@aol\.com/ \
	/.*@v3consulting\.com/ \
	/.*diagnostik-nord\.de/ \
	/.*torfvertrieb\.de/ \
	/.*@spexlift\.de/ \
}


list "whitelist users" rcpt {  \
	postmaster@stedman.co.hu \
	herbst@fse-vertrieb.de \
	c.viereck@inco.de \
	mv@inco.de \
	/.*@work.is-fun\.net/ \
	/.*@axxatronic\.de/ \
	/.*@fundinger\.de/ \
	/.*@steininger\.de/ \
	/.*@ibfriedrich\.com/ \
	/.*@magyarmobil\.hu/ \
	/.*@tunesisters\.com/ \
	/.*@adgee-career\.com/ \
	/.*@adgee-group\.com/ \
	/.*@adgee-consulting\.com/ \
	/.*@adgee-international\.com/ \
	/.*@brucke-international\.com/ \
	/.*@youinjordan\.com/ \
	/.*@youinglobal\.com/ \
	/.*@pabst-publishers\.com/ \
	/.*@onnicon\.com/ \
	/.*@ifoton\.de/ \
	/.*@gehlen-verpackungen\.de/ \
	/.*@epo-marketing\.de/ \
	/.*@buntebueffel\.com/ \
	/.*@intercom-it\.de/ \
	/.*@virtual7\.de/ \
	/.*@virtual7\.ro/ \
	/.*@rh-productions\.de/ \
	/.*@rh-pro\.de/ \
	/.*@wittmann-finanzgruppe\.de/ \
	/.*@stb-maier\.de/ \
	/.*@phoenix-software\.de/ \
	/.*@gabmed\.de/ \
	/.*@exportpages\.de/ \
	/.*@exportpages\.com/ \
	/.*@sunfloorenergy\.de/ \
	/.*@gnb-gmbh\.de/ \
	/.*@mabco\.de/ \
	/.*@tedema\.de/ \
	/.*@roger-richter\.de/ \
	/.*@schwarzwaldgrund-tonbach\.de/ \
	/.*@liqui-moly-china.cn\.de/ \
	/.*@massartbrendle-art\.com/ \
	/.*@365cigs\.com/ \
	/.*@chigar\.com/ \
	/.*@goodlife365\.com/ \
	/postmaster@.*/ \
	/.*@info\.villeroy-boch\.com/ \
	/.*@comprarumaestrela\.pt/ \
	/.*@artkom\.*/ \
	/.*@geyer-kabel\.com/ \
	/.*@gtc-mail\.de/ \
	/.*@siedenhans\.de/ \
	/.*@holidayguru\.ie/ \
	/.*@holidayguru\.fi/ \
	/.*@holidayguru\.no/ \
	/.*@deublinrussia\.ru/ \
	/.*@contrado-gmbh\.de/ \
	/webwork@claudia-klinger\.de/ \
	/.*@kjopenstjerne\.no/ \
	/.*@ostatahti\.fi/ \
	/.*@airpressure-bodyforming\.com/ \
	/.*@philo\.de/ \
	/.*@munich-accessories\.de/ \
	/.*@datron\.fr/ \
	/.*@borgward\.com/ \
	/.*@schwimmakademie\.net/ \
	/.*@mws-makler\.com/ \
	/.*@bfs-abrechnung\.de/ \
	/.*@be360\.com/ \
	/.*@top-pruefung\.de/ \
	/.*@itav-decotec\.com/ \
	/.*@kleinkopf-gmbh\.de/ \
	/.*@imageaktiv\.de/ \
	/.*@quatrotec\.de/ \
	/.*@ifrs\.org\.uk/ \
	/.*@sailpark\.de/ \
	/.*@frankundteam\.de / \
	/.*@routex\.com/ \
	/.*@routex\.eu/ \
	/.*@rsactiv\.de/ \
	/.*@freywinkler\.de/ \
	/.*@cologneweb\.com/ \
	/.*@fuba\.de/ \
	/.*@bsk-ffm\.de/ \
	/.*@kitekahunas\.com/ \
	/.*@ssp-steuerkanzlei\.de/ \
	/.*@seifert-reister-schroth\.de/ \
	/.*@is-fun\.de/ \
	/.*@is-fun\.com/ \
	/.*@zahnarztcicekaugsburg\.de/ \
	/.*@stein-stein\.de/ \
	/.*@reiki\.de/ \ 
	/.*@3mfuture\.com/ \ 
	/.*@nachricht\.maxenergy\.de/ \
	/.*@nachricht\.maxenergy\.at/ \
	/.*@kunden\.maxenergy\.at/ \
	/.*@kunden\.maxenergy\.de/ \
}

# Give this a try if you enabled DNSRBL
#dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10

# And here is the access list
acl whitelist list "my network"
acl whitelist list "my friends"
acl whitelist list "broken mta"

acl whitelist list "whitelist users"
acl whitelist list "whitelist addresses"
acl whitelist list "isfun-ausnahmen"
dacl whitelist dkim pass
#acl greylist list "grey users" dnsrbl "SORBS DUN" delay 24h autowhite 3d
##acl greylist list "grey users" delay 30m autowhite 3d

# sendmail may-be-forgend verzoegerung
sm_macro "maybe_forged" "{client_resolve}" "FORGED"
acl greylist sm_macro "maybe_forged" delay 1m

# do nothing. to activate this for all change it to 'acl greylist default'
# BE CAREFUL, MONITOR YOUR LOGFILES, YOU MAY LOSE MAILS!!
##acl whitelist default
acl greylist default
##################################################################################################
geoipdb "/usr/share/GeoIP/GeoIP.dat"