Sendmail: How does one blacklist annoying spammers?

[Kevin J. Cummings]

On 06/27/2010 04:49 PM, Daniel B. Thurman wrote:
> 
> This is the audit log of milter-greylist:
> 
> type=AVC msg=audit(1277670351.513:52178): avc:  denied  { getattr } for 
> pid=30048 comm="sendmail"
> path="/var/run/milter-greylist/milter-greylist.sock" dev=sda3
> ino=4114571 scontext=unconfined_u:system_r:sendmail_t:s0
> tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file

Not sure, my mail server is running in permissive mode.
Here is my context:

> srwxr-xr-x. grmilter grmilter unconfined_u:object_r:var_run_t:SystemLow /var/run/milter-greylist/milter-greylist.sock

But, yes, I have audit messages in my audit logs:

> type=AVC msg=audit(1277675063.785:698389): avc:  denied  { getattr } for  pid=4563 comm="sendmail" path="/var/run/milter-greylist/milter-greylist.sock" dev=sda9 ino=1466053 scontext=unconfined_u:unconfined_r:sendmail_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
> type=AVC msg=audit(1277675063.786:698390): avc:  denied  { write } for  pid=4563 comm="sendmail" name="milter-greylist.sock" dev=sda9 ino=1466053 scontext=unconfined_u:unconfined_r:sendmail_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file

-- 
Kevin J. Cummings
kjchome at rcn.com
cummings at kjchome.homeip.net
cummings at kjc386.framingham.ma.us
Registered Linux User #1232 (http://counter.li.org)