Will milter-greylist solve my directory harvest attacks?

Peter Peters P.G.M.Peters at UTWENTE.NL
Fri Dec 16 08:31:48 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

shuttlebox wrote on 15-12-2005 23:48:
> On 12/15/05, *Matt Kettler* <mkettler at evi-inc.com
> <mailto:mkettler at evi-inc.com>> wrote:
> 
>     Further follow-up.. milter-sender is the exact opposite of what
>     we're talking
>     about here. That validates the sender, not the recipient.
> 
>     Perhaps milter-ahead could be used here, but not milter-sender.
> 
> 
> I don't use any of them but obviously milter-ahead sounds like a better
> fit. I still don't see how you can invalidate recipients on a relay
> without it though. Sendmail uses its mailertable file to see if it can
> deliver to, for example, an Exchange server further in, it can not
> validate the left side of the mail address and will send everything to
> Exchange.

In principle all (Exchange) accounts and e-mail addresses are centrally
maintained. Changes are exported to Exchange and the virtusertable
within sendmail.

Ofcourse this is theory. Some departments still don't use this system
but I only get 2300 out of 81000 locally undeliverables. Out of those
2300 2000 become double bounces. One of my goals for next year is to
lower the remaining 300 some more.

- --
Peter Peters, senior beheerder (Security)
Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
Universiteit Twente,  Postbus 217,  7500 AE  Enschede
telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/itbe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDont0Mbmy+DDgnIURArKZAJ9m0Q75pSBlUWFCjC1HKN6mV3UeFwCfS77o
lBUf/4tNewDrBpVAeW7yRPA=
=Ahmu
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list