Subj : Re: Grey Listing System
To   : All
From : HECTOR SANTOS
Date : Thu Jan 31 2019 19:18:36

Date: Wed, 16 Aug 2006 21:30:42 -0400
From: HECTOR SANTOS
To: RICK SPILMAN
Subject: Re: Grey Listing System
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155778493.46.1155759379@winserver.com>
References:  <1155759379.46.1155736465@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 86


<RICK SPILMAN> wrote in message

> I am getting stats now and it seems to be working well.
>
> One quick question though.  Will all mail be checked even if it is
> coming from a regular source that gets checked once and then does not
> need to be checked each time?  For example, mails coming from the
> Winserver mail list.  Does everyone get held each time?

Not within the blocking period.

Thats part of the "White listing" training process.

Its up to you. :-)

I think I have it whitelisted here, myself.

Here is the original GREYLIST documentation by the author:

http://projects.puremagic.com/greylisting/whitepaper.html

GREYLISTING uses a "triplet" concept where one message is identified by
three items:

    - IP address
    - Envelope MAIL FROM address
    - Envelope RCPT TO address

The triple is the "Hash" unique value of all three:

    triple = hash-value(ip, from, to)

You record this and if its comes in again within X time, then you accept it.

Spammers might try again using a different TO or a different IP or a
difference FROM, so the triplet will be different. That is why it works very
well to stop the spammer is tries to use different ways to send the same
message.

You can have an expiration on this or you might decide to white list the
FROM.

I think when you read all about it, how everyone uses it, I think everyone
agrees GREYLISTING works, but you also need to train it to avoid the "1st
time surprises" from your social and especially business network of users.

I'm at a point where if I am talking to a customer on the phone and I ask
him to send me some logs or whatever, I tell him:

    "Let me send you a message to the address YOU will be using
     to send me the log.  This will automatically put your address
     in our customer white list."

I send the message, smtpfilter-autowhite, adds his name to the
auto-whitelist list and when he finally sends his message to support, he
isn't going
surprise.

At first, I was getting, "I tried to send it hector but it is being
rejected" and I was saying "Oh, I'll get it within the hour.."

But i got tired of getting the reasons explaining it was an experimental
greylisting system.

In my view, its poor Customer Relations, but as long you auto-white list a
customer you know will be sending mail, it really isn't so bad.   For people
who send unsolicited, well, it is expected that it is make it within 1 hour.

I have not heard of any complaints so far. But I was keeping a watch for a
while setting there looking at the stats and pending blocks.  It got to the
point, that it was really working.  Good Systems don't have problems, Bad
Systems do.  And thats what it helps stops - the bad systems! :-)

Anyway, I know how people will feel, so you have to only to have decide for
yourself if you can come to trust this system enough to use it and let it
run on its own.  I know I have and with WCSAP, SMTPFILTER-CHECKWORDS with
our own list of words, with a long trained white list, our spam is nearly
ZILCH with no false positives!  I know Andrea is really happy, the junk she
use to get in our inbox was OUTRAGEOUS! :-)

---
HLS


 * Origin: Prison Board BBS Mesquite Tx  //telnet.RDFIG.NET www. (1:124/5013)

.