>we have noticed that sagrey has roughly 95% effective re: % of spam hits in
>our environments

We find that bad recipients, then selective greylisting kills 90%+.

>is anyone here that is using sagrey come up with some really effective meta
>rules using it??

greylisting after DATA seems so inefficient that it's counter-productive (more 
processing on DATA) when compared with greylisting pre-DATA.  I find the idea 
bizarre.

Applying greylisting selectively is important (debatable). 

One can be very selective pre-DATA with envelope rules and restriction classes 
that channel suspect MTAs into restriction classes that greylist and are more 
aggressive. 

Simply, we greylist every msg unless it has non-suspect PTR and HELO, and we do 
it all pre-DATA/envelope.  iow, a legit sender who has either a suspect PTR or 
a suspect HELO won't get rejected, but they will get beat up more.

content-scanning is so expensive that we put a lot of effort pre-DATA into 
feeding it a little traffic as possible.

Len

Reply via email to