It's on here because its not an issue with greylisting (afterall it IS 
working), but the overall Spamassassin process involved.  I'm looking to 
optimize what I am doing with Spamassassin since I am seeing the greylisting 
stop catching the spam now...

Thanks for the input.  I'm using:
Postfix (I drop a ton of connections before the mail is even allowed in to my 
filters)
 - 6 RBLs
 - malformed email tests
Spamassassin
mimedefang
razor2
dcc
pyzor
bayes lists
Mailscanner
 - clamav/sophosav
local whitelist/blacklist
SPF (working on it anyway)  Anyone had any luck with SPF checking?

How about dkim?  Am I missing anything that I can look at?

 Regards,
  Scott

-----Original Message-----
From: Chris Hoogendyk [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 24, 2008 11:27 AM
To: SpamAssassin Users List
Subject: Re: Oh ohh. grey listing starting to fail



John Hardin wrote:
> On Thu, 24 Apr 2008, SM wrote:
>
>> It's trivial for malware engines to retry.  There isn't any queueing, 
>> as a standard MTA does, being done.  This has been happening since 
>> some time. Greylisting only fails if you rely on it to stop spam.
>
> Greylisting, like any other antispam technique, blocks some portion of 
> the flood. There is no one magic silver bullet.
>
> It is still a useful tool. Greylisting only fails if you rely on it 
> *alone* to stop spam.

yup.

Interesting that this was posted on the spamassassin users list rather 
than on the milter-greylist users list.

Suggestions that I've seen, but not yet tried myself, include using 
various dnsrbl's, using a longer greylisting period for certain types of 
sites to allow time for them to show up in the dnsrbl's, etc.

In addition, we have started using a lot more of the filtering features 
on our mta (sendmail) directly, thus dropping lots of stuff before it 
ever reaches milter-greylist or spamassassin. The OP was using postfix, 
so someone else will have to provide suggestions there. I would suggest 
searching the milter-greylist archives and wiki and going to the postfix 
users list and wiki to see what options it may have.

I've got a white board filled with the structure and all the pieces and 
interconnections of our mail system's software. Milter-greylist is in 
the upper right corner, just above mimedefang and spamassassin. Lots of 
other stuff going on. In a spam free world, I wouldn't need that white 
board -- think of it as a war room visual aid.



---------------

Chris Hoogendyk

-
   O__  ---- Systems Administrator
  c/ /'_ --- Biology & Geology Departments
 (*) \(*) -- 140 Morrill Science Center
~~~~~~~~~~ - University of Massachusetts, Amherst 

<[EMAIL PROTECTED]>

--------------- 

Erdös 4



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Reply via email to