[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: greylisting in spamd



I assume the spamd being discussed is that from the 3.5 tree ?
Has anyone compiled and run this on 3.4 ?
If so, is there a 3.4 package or port ?
If not, what is the correct csv 'magic' to check out just spamd ?

Thanks,

  -- Curt

On Tue, 2004-04-13 at 14:00, Dom De Vitto wrote:
> Yep, that's it.
> 
> "Proper" SMTP software will retry the connection, dodgy virus code
> may not. 
> 
> 
> Dom
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> Dom De Vitto                                       Tel. 07855 805 271
> http://www.devitto.com                         mailto:dom_(_at_)_devitto_(_dot_)_com
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> Where do you want to go today?  Same as every day.... Windows Update.
> 
> -----Original Message-----
> From: owner-misc_(_at_)_openbsd_(_dot_)_org [mailto:owner-misc_(_at_)_openbsd_(_dot_)_org] On Behalf Of
> Joe Hickory
> Sent: Tuesday, April 13, 2004 4:51 PM
> To: misc_(_at_)_openbsd_(_dot_)_org
> Subject: greylisting in spamd
> 
> hi list, 
>  
> just read the spamd manpage. have a question about that greylisting there.
> as i understand, new unseen tuples of connection entries to the smtp port
> are getting rejected with a 450 error message and it will be greylisted.
> after the default time of 4 hours they'll be deleted from the greylist. in
> case of a connection attemt within the 4 hours the server gets on the
> whitelist, as a so my question is, does this behaviour also stops (many or
> most) actual virusses from reaching my inbox? 
> as i understand, most of them have an own smtp engine that they are able to
> spoof their senders address. so as there the mail is rejected, because it is
> randomly choosen, so i think it is relatively unlikely that the same tuple
> from the same sending host reaches my spamd which would whitelist that
> tuple. 
>  
> anybody can tell me wheather my thoughts are right, an it is massively
> decreasing the amount of viruses which are reaching me, or am i completeley
> wrong with my assumption. 
>  
> any hint appreciated 
>  
> joe 
> 
> --
> NEU : GMX Internet.FreeDSL
> Ab sofort DSL-Tarif ohne Grundgebühr: http://www.gmx.net/info