Yizhar Hurwitz wrote:

> I have found that for some reason unknown yet, MS Exchange 2003 SP2 does
> not handle greylisting very well with default configuration,

I've never heard of that.  We use greylisting and have never had problems
receiving mail from MS Exchange users.

Now, there *are* some marginal SMTP servers that fail in the following
scenario:

C: HELO myname.domain.com
S: 250 whatever
C: MAIL FROM:<[EMAIL PROTECTED]>
S: 250 2.1.0 go ahead
C: RCPT TO:<[EMAIL PROTECTED]>
S: 451 4.7.1 greylisting; try in 2 minutes
C: DATA
S: 503 5.0.0 need RCPT!

(and client bounces message)

Notice that?  Some marginal clients attempt a DATA even if all RCPTs are
4xx'd.  Our solution is to greylist after the DATA phase (that is, at the ".")
While this wastes bandwidth, it does keep those marginal SMTP implementations
from failing.  It also lets us log subject lines of greylisted mail, and we
get lots of logs like this:

what=greylisted, relay=222.46.49.130,
[EMAIL PROTECTED], subject=Corel Draw

what=greylisted, relay=59.1.51.100, [EMAIL PROTECTED],
subject=High quality watches

what=greylisted, relay=220.87.2.20, [EMAIL PROTECTED],
subject=Replica Watches

what=greylisted, relay=222.79.144.204,
[EMAIL PROTECTED], subject=Replica Watches for Low
Prices

what=greylisted, relay=68.179.137.129,
[EMAIL PROTECTED], subject=Adobe%2C Windows Under
$50%2C and many more from Office XP

what=greylisted, relay=61.53.255.73,
[EMAIL PROTECTED], subject=Your woman wants a
replica

what=greylisted, relay=24.174.27.244, [EMAIL PROTECTED],
subject=Trading Report For MicroCap

what=greylisted, relay=65.171.68.158,
[EMAIL PROTECTED], subject=The Daily Stock Barometer

We block around 50% of all incoming mail just using greylisting.

--
David.

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to