OT - Greylisting (was: Re: gOCR SpamAssassin plugin)
Julian Field
mailscanner at ecs.soton.ac.uk
Sat Aug 12 17:47:59 IST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
telnet port 25 and time the gap between the connection opening and the
greeting text appearing.
James L. Day wrote:
> How can I tell if Sendmail's greetpause is working? I don't see any
> evidence in the log files..
>
> Thanks,
> Lynn
>
> Jim Holland wrote:
>> On Sat, 12 Aug 2006, Julian Field wrote:
>>
>>
>>> Kevin Miller wrote:
>>>
>>>> Michael Baird wrote:
>>>>
>>>>
>>>>> Greylisting decreases load immeasurably on a mailscanner system, the
>>>>> cost of greylisting is much less then allowing the message to go
>>>>> through the mailscanner sytem. I deployed it several months ago, it
>>>>> really is a good tool, and I've had very few complaints (10000 users).
>>>>>
>>>> I just use Sendmails greet pause which is 10 seconds to set up and works
>>>> a treat - does greylisting add significant control or improvement over
>>>> that? Anybody using them in tandom or is one or the other to be
>>>> preferred?
>>>>
>>> I use both, and I have had to turn the greetpause setting down to about
>>> 2 or 3 seconds, as some systems (such as NTMail) don't check properly
>>> for the welcome message before sending the HELO or EHLO. At that sort of
>>> setting, it has little benefit. And there is no easy way to set up a
>>> whitelist with greetpause.
>>>
>> I just put "GreetPause:<ipaddress> 0" entries in the access file before
>> the default entry. See sendmail notes:
>>
>> If FEATURE(`access_db') is enabled, an access database
>> lookup with the GreetPause tag is done using client
>> hostname, domain, IP address, or subnet to determine the
>> pause time:
>>
>> GreetPause:my.domain 0
>> GreetPause:example.com 5000
>> GreetPause:10.1.2 2000
>> GreetPause:127.0.0.1 0
>>
>> Regards
>>
>> Jim Holland
>> System Administrator
>> MANGO - Zimbabwe's non-profit e-mail service
>>
>>
>
- --
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at MailScanner.biz
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk
-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.7.0
Charset: ISO-8859-1
wj8DBQFE3gZCEfZZRxQVtlQRAgCIAKDxvomKghdRbauMzRHOFBKt3lPoKACeJwzB
C+Db1gdoooFhV/9x5CJbcX0=
=e5ab
-----END PGP SIGNATURE-----
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk
More information about the MailScanner
mailing list