Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Thread

Some spam throughout Milter Greylist

Some spam throughout Milter Greylist

2007-01-15 by remy_d1

Hi,

I have some spams which are not recognize by milter greylist; These
spams are auto whitelisted.

It means that they are send like a real message (ham) ?

This kind of spam become important, especially the spams whith text
inside a picture.

How can I filter it ?

Thanks !

Re: [milter-greylist] Some spam throughout Milter Greylist

2007-01-15 by Mart Pirita

Tere.
> I have some spams which are not recognize by milter greylist; These
> spams are auto whitelisted.
>
> It means that they are send like a real message (ham) ?
>
> This kind of spam become important, especially the spams whith text
> inside a picture.
>
> How can I filter it ?
>
>   
I have some problems, but greylist isn't actually a spam filter. It just
helps not getting spam from direct spammers, who are not using MTA -s.
But if spammers are using fully working MTA -s, greylist won't help us.


-- 
Mart

Re: [milter-greylist] Some spam throughout Milter Greylist

2007-01-15 by Emmanuel Dreyfus

On Mon, Jan 15, 2007 at 12:09:27PM +0100, Michael Menge wrote:
> If they resend the E-Mail like a real mailserver, or send a second  
> mail with the same triple (sender , reciever, ip) then ther is no way  
> to distinguish spam from ham. In near futute more spemmer will addapt  
> to greylisting.

Sure they will, but with moderation. As I pointed some time ago, 
maintaining the mail queue to manage resends costs resources. Of course
the resources are free for the spammer, since he uses someone else's
computer, but the free resources are finite. 

The mail queue will grow with greylisting delays and with the amount of 
sent spam. Once the spammer consumes all the available resources, 
increasing the greylisting delay will lower the amount of spam sent. 

Using very long delays is not possible, because users wants mail to go 
be quickly delivered. This is where you can use variable delays 
depending on the sender's reputation, using DNSRBL or other means. 

-- 
Emmanuel Dreyfus
manu@...

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.