On 2012-05-27, David Diggles <da...@elven.com.au> wrote:
>> What do you mean by "running in blacklist mode" ?
>> Which settings are different from Grey trapping ?
>> Are Openbsd mailing list the only list or mail you have problems with ?
>> 
>> /Hasse
>
> By blacklist mode, I mean this:
>
> spamd -b
> spamd-setup -b
>
> pf.conf:
> table <spamd> persist
> pass in on egress proto tcp from <spamd> to any port smtp \
>     rdr-to 127.0.0.1 port spamd
>
> The OpenBSD mailing list was not the only smtp server I was having
> problems with.
>
> Others included:
>
> 1. test email from my work account
> 2. business email from a wholesaler I have been organising purchase with
>
> For sake of 2. I need to play safe for the time being, and suffer a
> few extra incoming spams a day.  Once I have that sorted out, I will
> be ready to try greylisting again.

Greylisting behaves a bit differently when used on a low-volume mail
server compared to a large campus/organisation mail system where most
of the big providers will be constantly auto-whitelisted due to the
volume of mail they're sending (i.e. big sites get a lot more inbound
mail so the problem mailhosts tend to stay in the database at most
times).

For the smaller setups I've built when I used greylisting I often
needed to maintain separate whitelists. The only actively-maintained
public whitelist I know of (dnswl.org) is only usable via DNS queries
unless you pay for high volume access (and spamd doesn't support
doing this via DNS lookups), so you are stuck with an outdated
public list, and/or manual listings.

Not sure if these particular ones are still a problem, but here are
examples of some senders I had problems with at various times in
the past (excessive delays or retries which were too slow to get
past greylisting) : amazon, aol, bigfish, ebay, gmail, messagelabs,
orange, paypal, postini, yahoo. Now I either use dnswl to exempt
known problem hosts from greylistikg (with some manual whitelists
on top; not done via spamd) - or in several cases just stopped
using greylisting altogether.

Reply via email to