Milter-greylist

Hi Ryan,

> Ryan Moore a \ufffdcrit :
> > 
> > I use the following (on one line):
> > 
> > acl whitelist domain
/[0-9]{1,3}\-[0-9]{1,3}\-[0-9]{1,3}\-[0-9]{1,3}.*\.static/
> >
> 
> That's exactly the kind of client I would rather blacklist or 
> "heavy" greylist. More than 90% of spam comes from infected customer 
> ADSL clients, the ones which have such generic rDNS entries (either 
> static or dynamic).
> 
> If someone wants to operate his own mail server on a private ADSL 
> line, he must prove its legitimity by some reputation mechanisms:
> 
> - publish an SPF record for his domain
> - get his server IP listed in list.dnswl.org whitelist
> - get his server IP unlisted from pbl.spamhaus.org
> - be sure to have his server RFC-compliant, for example by reliably 
> retrying after 4.x tempfail until 5 days
> - professionnally maintain his server, keeping it out of intrusions 
> and spam relaying
> 
> All these mechanisms may be used in milter-greylist 4.0+ and help 
> building an reputation for inbound clients.

Although I totally agree with what you say above, it's difficult to explain
proper email practice to your clients that don't care to understand why their
message was delayed by 16 hours.

All they know is that their contacts email couldn't get through until 16 hours
past, and when they were on their previous provider, that never used to happen.

This is the only real problem I have with greylisting, in that you don't know
and can't "fix" an issue until after it has happened (either recognising the
delay in your daily log reports or waiting until the customer complains). At
either point, it's too late.

For me, I have lost one client because of this since I started using
greylisting. Even while I turned it off for their domain when it first
happened, they lost "confidence" that they weren't losing email as a result.

That's one of things all our technical skills at managing spam misses, that
clients only see A and Z, and don't care about the path from A to Z.

Regards,

Michael.

> -- 
> Ce message a ete verifie par MailScanner
> pour des virus ou des polluriels et rien de
> suspect n'a ete trouve.
------- End of Original Message -------