Milter-greylist

On Thu, 11 Feb 2016, manu@... [milter-greylist] wrote:

> Bob Friesenhahn bfriesen@... [milter-greylist]
> <milter-greylist@yahoogroups.com> wrote:
>
>> For as long as I have used it, milter-greylist has a policy to
>> whitelist mail passing SPF tests by default.
>
> I blacklist spf self, that is when the spammer's SPF record validates
> for my own machine.

Is this a common ploy?

Regardless, it is good that SPF can be used to decide if the mail is 
sent from a correct IP address (according to someone else) but 
whitelisting by default does not seem like a good strategy.  Instead 
the IP should be checked against blacklists and only after passing 
those tests should it be whitelisted due to passing SPF checks.

It may be that I am not properly understanding the algorithm that 
milter-greylist is using.

Bob
-- 
Bob Friesenhahn
bfriesen@..., http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/