Thanks Robert. I tested it after that and it got rejected correctly..
I'm now trying to set up a different Policy and quota that tracks SASL
username but both policies seem to get caught I have my highest priority
policy:
Auth Outbound   15      SASL Authenticated Outbound     no
Default Outbound        20      Non Authenticated
no

With Auth Members set to:
Source  Dest    Disabled
$*      any     no

And Default set to:
Any     any     no

I'm trying to give different limits of quotas to authenticated and none
authenticated users but when my quotas kick in it seems to match both:
Sep 16 11:01:37 mail01 cbpolicyd[25778]: module=Quotas, mode=create,
host=192.168.168.136, helo=griffin.com, [email protected],
[email protected], reason=quota_create, policy=257, quota=257,
limit=257, track=SASLUsername:[email protected],
counter=MessageCount, quota=1/2 (50.0%) 
Sep 16 11:01:37 mail01 cbpolicyd[25778]: module=Quotas, mode=create,
host=192.168.168.136, helo=griffin.com, [email protected],
[email protected], reason=quota_create, policy=2, quota=258,
limit=258, track=SenderIP:192.168.168.136/32, counter=MessageCount,
quota=1/2 (50.0%)

I was under the impression that the first policy that matches would be
the only one executed so if it sees a SASL username it should only
follow that policy.

Thanks for your assistance.
Ian




-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Robert Anderson
Sent: 16 September 2010 10:49
To: [email protected]
Subject: Re: [policyd-users] Going over 100% of Quota.

> I'm attempting to set up quotas to track messages per IP. I have a 
> quota that is set to Track SenderIP/32 period of 3600 with a limit of 
> 2 and a verdict of REJECT. However when I've sent over two messages I 
> get this in the maillog:
>
> Sep 16 10:27:46 mail01 cbpolicyd[25778]: module=Quotas, mode=update, 
> host=192.168.168.136, helo=, [email protected], 
> [email protected], reason=quota_update, policy=2, quota=258, 
> limit=258, track=SenderIP:192.168.168.136/32, counter=MessageCount,
> quota=3/2 (148.5%)
>
> So it's matching the policy and the quota but allowing me to go over 
> the quota (3/2 (148.5%).. What am I doing wrong?

Hi Ian,

There has been a discussion about this, please see
http://lists.policyd.org/pipermail/users/2010-July/003069.html from the
mailing list archives.

Robert
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to