whitelist syntax

[jdd]

Hello,
I'm back to postfilter fine tuning and I wonder what is the syntax of
the access.conf postfilter file for whitelisting

for example, I see in the file the line:

# "NNTP-Posting-Host", "46.165.242.91"

but there is no "NNTP-Posting-Host" header on messages source, only
posting-host="cu...". What is allowed in the left part of the line?

on the "Path" header, IP is written in reverse order. I see in one of
the aioe post the IP "46.165.242.75", so if I filter by IP, do I have to
use direct or reverse IP notation?

thanks
jdd

[Aioe]

Post by jdd
but there is no "NNTP-Posting-Host" header on messages source,

NNTP-Posting-Host was an old header (removed by INN 2.6) that showed the
sender's IP address of each post.

Nowadays another header (Injection-Info) is used.

Whitelist allows two parameters: an *HEADER* and a REGULAR EXPRESSION so
you are able to whitelist almost everything

In example

"Injection-info", "posting\-host\=\"127\.0\.0\.1"

whitelist every local messages

Post by jdd
on the "Path" header, IP is written in reverse order

are you sure?

i read: Path:
aioe.org!k4i88jDV7S/S/OfVCyT4Dg.user.46.165.242.75.POSTED!not-for-mail

host 46.165.242.75
75.242.165.46.in-addr.arpa domain name pointer aioe.org

[jdd]

Post by Aioe

Post by jdd
but there is no "NNTP-Posting-Host" header on messages source,

NNTP-Posting-Host was an old header (removed by INN 2.6) that showed the
sender's IP address of each post.
Nowadays another header (Injection-Info) is used.

OK, thanks

Post by Aioe
Whitelist allows two parameters: an *HEADER* and a REGULAR EXPRESSION so
you are able to whitelist almost everything
In example
"Injection-info", "posting\-host\=\"127\.0\.0\.1"

this I don't understand :-(, this one on the same line?

on your very article source I read

Injection-Info: gioia.aioe.....

and

posting-host="mUQk....

that looks as two headers, not one

or do "Injection-info" mean all the regular headers?

Post by Aioe

Post by jdd
on the "Path" header, IP is written in reverse order

are you sure?

of course not, but there it's not the user IP but your server's one. On
my server, using what I think is the default INN behavior (but I'm not
really sure of anything :-() I get, for example

!.POSTED.167.XX.YY.77.rev.sfr.net and as I know my users IP I'm sure
it's reversed

anyway I suppose postfilter uses anything it can read in the headers :-)

thanks
jdd

[yamo']

Hi,

Post by jdd
!.POSTED.167.XX.YY.77.rev.sfr.net and as I know my users IP I'm sure
it's reversed

It's not an IP it is a DNS name.

[jdd]

Post by yamo'
Hi,

Post by jdd
!.POSTED.167.XX.YY.77.rev.sfr.net and as I know my users IP I'm sure
it's reversed

It's not an IP it is a DNS name.

sure but the IP is part of it :-)

the postfilter search is a text one, so the search target have to be the
same as in Path (I guess)

and if I get the IP, I can as well ban this IP in readers.conf

jdd

[yamo']

Hi,

Post by jdd

Post by yamo'

Post by jdd
!.POSTED.167.XX.YY.77.rev.sfr.net and as I know my users IP I'm sure
it's reversed

It's not an IP it is a DNS name.

sure but the IP is part of it :-)

usually xx.yy.zz.tt.rec.truc.example match IP : tt.zz.yy.xx
For wanadoo/orange it differ...

[jdd]

Post by yamo'
usually xx.yy.zz.tt.rec.truc.example match IP : tt.zz.yy.xx

yes

Post by yamo'
For wanadoo/orange it differ...

odd :-(

jdd

[jdd]

Whitelist allows two parameters: an *HEADER* and a REGULAR EXPRESSION so you
are able to whitelist almost everything
In example
"Injection-info", "posting\-host\=\"127\.0\.0\.1"
whitelist every local messages

Hello :-)

sorry for asking again, but I'm not sure of the meaning of your message
:-(

first, on your example, after the comma, you write a header
"posting\-host\=

does it mean that "Injection-info" means the complete header list?

then

"Injection-info", "u+UaaVXmxxxxxxo7PYQ.user.ns507557.dodin.fr.nf"

do not give syntax error but does it give access to the user with this
identity?

"Injection-info", "Path=!alphanet.ch!miakibot!"

or

"Injection-info",
"posting\-host\=\"634ce6c9682d817d72f6177875e2bb4f\.nnrp\.alphanet\.ch"

give sybntax error, whatever I do escaping things with \ :-(

thanks
jdd

[Aioe]

Post by jdd
"Injection-info", "Path=!alphanet.ch!miakibot!"

it should be:

"Path", "miakibot"