Relay Alert Exceptions

Post Reply
JulesR
Junior Member
Posts: 14
Joined: 17 Jun 2009, 05:01

Relay Alert Exceptions

Post by JulesR »

Hi there,

I really love the relay alert notifications, and it has been invaluable for catching spammers in the past, but how about adding the ability to prevent notifications/alerts from a particular user account? Note that I don't want to ignore all events from that user, just the relay alerts.

As an example, some users have legitimate needs to send large amounts of e-mail, and we're flooded with notification e-mails from them every time they reach the trigger threshold. Sure, we can filter these out, but it makes more sense to prevent them being sent :)

Keep up the great work.
minadreapta
Junior Member
Posts: 44
Joined: 19 Dec 2007, 12:52

Post by minadreapta »

what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?

wouldn't you want to see what it sends?

you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.

but i keep the relay alerts delivered to my main address.
JulesR
Junior Member
Posts: 14
Joined: 17 Jun 2009, 05:01

Post by JulesR »

minadreapta wrote:what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?

wouldn't you want to see what it sends?
Not really. The point of providing the exceptions is that only a very select few people would be added to the exception list to begin with. If anything it's a feature requested more for LOCALRELAY than standard SMTP relay.
you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.

but i keep the relay alerts delivered to my main address.
You missed the point. It's far better to prevent the mails from being sent than it is to filter them out, since you're reducing traffic and server load in the process.
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

I'll add it to the wishlist for further consideration.
BuffaloWeb
Junior Member
Posts: 3
Joined: 04 Apr 2009, 18:09

Post by BuffaloWeb »

FWIW, I'd LOVE to see this capability as well...
ForumAdmin
Moderator
Posts: 1524
Joined: 01 Oct 2008, 09:24

Post by ForumAdmin »

This feature was added to v4.75 (csf.mignore)
BuffaloWeb
Junior Member
Posts: 3
Joined: 04 Apr 2009, 18:09

Post by BuffaloWeb »

hmm... I'm still seeing the alerts after adding the username in. I'm not sure which of these is causing the alert though:

RT_RELAY_ALERT = Default: 1
RT_RELAY_LIMIT = Default: 100
RT_RELAY_BLOCK = Default: 0

# This option triggers for email authenticated by SMTP AUTH
RT_AUTHRELAY_ALERT = Default: 1
RT_AUTHRELAY_LIMIT = Default: 100
RT_AUTHRELAY_BLOCK = Default: 0

# This option triggers for email authenticated by POP before SMTP
RT_POPRELAY_ALERT = Default: 1
RT_POPRELAY_LIMIT = Default: 100
RT_POPRELAY_BLOCK = Default: 0

# This option triggers for email sent via /usr/sbin/sendmail or /usr/sbin/exim
RT_LOCALRELAY_ALERT = Default: 1
RT_LOCALRELAY_LIMIT = Default: 100

# This option triggers for email sent via a local IP addresses
RT_LOCALHOSTRELAY_ALERT = Default: 1
RT_LOCALHOSTRELAY_LIMIT = Default: 100


The email I receive just says "Relay Alert for..." - it doesn't say if it is RT_RELAY_ALERT, RT_LOCALRELAY_ALERT, RT_LOCALHOSTRELAY_ALERT, etc.

Which of these does the new setting allow us to control?
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

You would have to post the whole alert email.
Post Reply