Re: [swinog] UPC Mailservers problems with greylisting

2017-01-05 Diskussionsfäden Per Jessen
Benoit Panizzon wrote:

> Hi Per
> 
>> Is there any point in greylisting genuine mailservers?  We only
>> greylist dodgy-looking setups.
> 
> True, no point in greylisting a propper SMTP engine that does queueing
> and would resend the email later in case of a 4XX error.
> 
> But how do you find out which ip's to greylist and which not to?

Hi Benoit, 
as I wrote yesterday, we use a fairly simple set of regex patterns to
look at the reverse mapping of the server address, plus another simple
set of criteria for e.g. the HELO.  I'll be happy to share them with
everyone. 



-- 
Per Jessen, Zürich (-4.2°C)




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] UPC Mailservers problems with greylisting

2017-01-05 Diskussionsfäden Beat Siegenthaler
On 05.01.17 10:36, Benoit Panizzon wrote:
> The Mail-Platform in the Netherlands is operated by UPC Austria
> (probably chello.at). And they still deny that there is a problem
> on their side and blame the ISPs that do greylisting.

Thanks.

Yes we all know such guys, sometimes we should look to the mirror...

But who is to blame if their customers do not know that their emails are
sent to /dev/nirvana without NDR's ? ;-)


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] UPC Mailservers problems with greylisting

2017-01-05 Diskussionsfäden Benoit Panizzon
Quick update on that case.

UPC Switzerland is fully aware of the problem.

The Mail-Platform in the Netherlands is operated by UPC Austria
(probably chello.at). And they still deny that there is a problem
on their side and blame the ISPs that do greylisting.

UPC Switzerland is trying to escalate the problem.

Regards

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] UPC Mailservers problems with greylisting

2017-01-05 Diskussionsfäden Benoit Panizzon
Hi Per

> Is there any point in greylisting genuine mailservers?  We only
> greylist dodgy-looking setups. 

True, no point in greylisting a propper SMTP engine that does queueing
and would resend the email later in case of a 4XX error.

But how do you find out which ip's to greylist and which not to?

We use milter-greylist and this has nice features like being able to do
DNS whitelist lookups and query SPF records to decide whether to
greylist a specific trippled or not. And it can sync it's database
across multiple servers.

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] UPC Mailservers problems with greylisting

2017-01-05 Diskussionsfäden Benoit Panizzon
Hi

> I do not greylist servers with correct spf record. With UPC i think
> the main problem is the missing NDR.

We also do not greylist if the SPF record matches.
We do not greylist IP's listed in the DNSWL.org or SWINOG
Whitelist either.

But none of this was true for the new 'NL' ranges used by upcmail.net.
The ranges in AT were already whitelisted, thus not causing that
problem.

So far no progress with the ticket I opened @ UPC.

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog