On Sun, 11 Aug 2013, Amir 'CG' Caspi wrote:

At 9:31 PM -0400 08/11/2013, Alex wrote:
Are you using sqlgrey? If not, it's incredible and you should try it.

I have not implemented any sort of greylisting yet. I can't use sqlgrey because I don't use postfix... my server runs sendmail. I'm sure there are some good sendmail-compatible greylisters but I haven't tried them yet...

milter-greylist is what I use, it seems to do the job, and it does reduce the spam volume.

I'm a bit worried about legitimate email getting bounced.

The only problem would be with a sending MTA that either is badly misconfigured or cannot properly deal with a tempfail result and either bounces the message as undeliverable or (worse) quietly drops it.

Sadly there are some major players with this problem who are apparently uninterested in fixing their systems. I suggest you do a bit of research on whitelists for greylisting before implementation. You would also probably want to whitelist known regular correspondents.

There's also the need to set your users' expectations. They should be trained that email is *not*, and is not intended to be, instantaneous.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.               -- James Madison, 1799
-----------------------------------------------------------------------
 4 days until the 68th anniversary of the end of World War II

Reply via email to