Cormack, Ken wrote:

> My greylisting is blocking these, but only after the DATA phase, after
> expensive SA overhead.

???

Why is that?

Surely you should do the greylisting test first, and if something is
greylisted, don't even call SA.  Just do action_tempfail.  (That's what
our CanIt products do.)

I am seeing a lot of these.  From today (edited log extracts: sender, subject):

11:43:58 [EMAIL PROTECTED], E.B.A.Y WORKERS NEEDED..FIND OUT M. 0. R. E.
12:13:55 [EMAIL PROTECTED], Get a ten time increase for your business literally 
overnight
12:24:48 [EMAIL PROTECTED], E.B.A.Y RESELLERS NEEDED .
12:28:16 [EMAIL PROTECTED], The Biggest Loser Club:  How would you do?
12:34:39 [EMAIL PROTECTED], Re: Re: Re:
12:45:39 [EMAIL PROTECTED], Get a ten time increase for your business literally 
overnight
13:18:12 [EMAIL PROTECTED], Free Bottle of Lipoplex with H.o.o.d.i.a-  L o s e 
weight in 2 days!!!
13:45:32 [EMAIL PROTECTED], Re: Hi
14:15:02 [EMAIL PROTECTED], I WASN'T FIRED . . . EVEN THOUGH I FAILED.
15:00:16 [EMAIL PROTECTED], This voucher is worth over usd 2500. redeem yours t 
o d a y ! !
15:15:00 [EMAIL PROTECTED], Any med for your girl to be happy!
15:15:54 [EMAIL PROTECTED], Need medicine? All here!
15:22:21 [EMAIL PROTECTED], Re: Hi
15:22:32 [EMAIL PROTECTED], Re: Hi
15:28:24 [EMAIL PROTECTED], Zealands
15:33:53 [EMAIL PROTECTED], R.E.F.I.N.A.N.C.E WHILE RATES HIT 40 YEARS Low!!
16:08:57 [EMAIL PROTECTED], The Biggest Loser Club:  How would you do?
16:53:30 [EMAIL PROTECTED], how r u

and greylisting seems to stop them.  The two [EMAIL PROTECTED]
senders were still greylisted, because the second one was for a different
recipient than the first (same sending IP, though.)

Regards,

David.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to