>Christian Rehkopf wrote:

>- use graylisting (thats IMO the most effective feature without false
>positives)

Be careful with delaying/greylisting. I see increasing problem over last
few months. Unfortunately some legitimate mail services like Yahoo are
trying to resend without waiting any significant period of time. As the
result, the ip address of this servers will be "embargoed". I hear
increasing number of complaints from users that they do not receive
emails. Investigation of the log files shows that email blocked by
delaying feature. I'm constantly updating the nodelay.txt file now.
For example, the last one happened today (actual email address is
removed for privacy reason):

=================================================================
Oct-4-07 03:42:07 m3727c1237 149.101.1.161 <[EMAIL PROTECTED]>
embargoing triplet:
                  (149.101.1.0,[EMAIL PROTECTED],[EMAIL PROTECTED])
waited: 3s
=================================================================


Nslookup 149.101.1.161 :

Name:    mailsc22.usdoj.gov
Address:  149.101.1.161

Obviously this email was not spam and came from legitimate email system.

Thank you,
Vadim

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to