> >Greylisting seems to be the most effective way of eliminating unwanted
> >email.  The problem is that it also has the potential to eliminate a
> >legitimate email.  Couldn't a feature be added to greylisting software
> >that dispatches an email to the sender of any email that is
> >temporarily rejected and doesn't retry within a certain amount of
> >time?  The email could say something like, "Your message of {date} was
> >rejected as possible spam.  Please call us at {phone_number}."
>
> att.biz accounts do something like this.  It isn't a phone call, but
> "go to $website and enter $code to unblock your mail to $recepient."

TMDA (in portage) could be set up to do something like this, I
believe.

I'm going to go ahead and try greylisting.  It sounds like regular
postfix checks can reject legitimate email just like greylisting can
end up doing, but postfix checks are cutting spam in half and it
sounds like greylisting will do a lot better.

I'm going to replace the following postix config:

smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
       permit_mynetworks,
       reject_non_fqdn_hostname,
       reject_invalid_hostname,
       permit
smtpd_sender_restrictions =
       permit_mynetworks,
       reject_non_fqdn_sender,
       reject_unknown_sender_domain,
       permit
smtpd_recipient_restrictions =
       permit_mynetworks,
       reject_non_fqdn_recipient,
       reject_unknown_recipient_domain,
       reject_unauth_destination,
       permit
smtpd_data_restrictions =
       reject_unauth_pipelining,
       permit

with this:

smtpd_recipient_restrictions =
       permit_mynetworks,
       check_policy_service inet:127.0.0.1:10030
       reject_unauth_destination,
       permit

How does that look?

- Grant
--
gentoo-user@gentoo.org mailing list

Reply via email to