Re: [Mimedefang] Justifying greylisting to management

2006-03-03 Thread Matthew S. Cramer
On Sun, Feb 26, 2006 at 02:56:10PM -0500, Jeff Rife wrote: This is why I turned to this group of experienced mail admins. I need a way to justify occasionally delaying good e-mail to people who have already said that occasionally *blocking* good e-mail (and thus *really* delaying it) is

Re: [Mimedefang] Justifying greylisting to management

2006-03-03 Thread Matthew S. Cramer
On Sun, Feb 26, 2006 at 10:48:52AM -0500, David F. Skoll wrote: However, I've also been surprised somewhat that spammers haven't reacted to greylisting still. I thought the technique would be invalid by now because the minute ratware/malware starts properly following the 4xx rules, the

Re: [Mimedefang] Justifying greylisting to management

2006-02-27 Thread Gary Schrock
Jeff Rife wrote: This is why I turned to this group of experienced mail admins. I need a way to justify occasionally delaying good e-mail to people who have already said that occasionally *blocking* good e-mail (and thus *really* delaying it) is acceptable. Now that's an interesting

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Kevin A. McGrail
Jeff: In my testing, I found that greylisting had too many false-positives causing important and even critical mail to be unacceptably delayed. Therefore, I agree with the PHBs at your work and that greylisting should be a last resort if other methods fail because you're only argument IMO is

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread David F. Skoll
Kevin A. McGrail wrote: In my testing, I found that greylisting had too many false-positives causing important and even critical mail to be unacceptably delayed. Really? That's quite the opposite of my experience. Greylisting is good IF you turn off greylisting for hosts known to retry (we

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Kevin A. McGrail
In my testing, I found that greylisting had too many false-positives causing important and even critical mail to be unacceptably delayed. Really? That's quite the opposite of my experience. Greylisting is good IF you turn off greylisting for hosts known to retry (we do that for 40 days: If a

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Guido
On Sunday 26 February 2006 05:28, Jeff Rife wrote: But, I absolutely can't get the PHBs at my work to approve of a full install there (currently I just greylist anything addressed to me) because critical e-mail might be delayed.  After much thought, I realize there is no way I can fight this

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread David F. Skoll
Kevin A. McGrail wrote: I just don't know if that 1 email that got delayed X number of hours from a non-whitelist host wouldn't be the proverbial spine breaking straw and have a feeling it would occur here and greylisting would have to be 100% removed because of 1 FP email delayed. If that's

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Kevin A. McGrail
Although email quite often is comparable to instant messaging, email was not designed to be instant. Hence delays can and will happen. Yes, but when the delays are in your control to mitigate, you better be able to CYA when an important email is delayed. I've had people upset that email was

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Guido
On Sunday 26 February 2006 18:10, Kevin A. McGrail wrote: Although email quite often is comparable to instant messaging, email was not designed to be instant. Hence delays can and will happen. Yes, but when the delays are in your control to mitigate, you better be able to CYA when an

Re: [Mimedefang] Justifying greylisting to management

2006-02-26 Thread Jeff Rife
On 26 Feb 2006 at 11:11, Kevin A. McGrail wrote: Good Point. The use of a multi-month whitelist for hosts known to retry properly to disable greylisting seems like an excellent fix that would probably solve 75% of the issues I was detailing previously (hazarding a guess here). I just

[Mimedefang] Justifying greylisting to management

2006-02-25 Thread Jeff Rife
After installing milter-greylist on my personal e-mail server, identified spam and viruses dropped dramatically (down to between 10- 20% of previous levels). But, I absolutely can't get the PHBs at my work to approve of a full install there (currently I just greylist anything addressed to me)