Hi Markus, On Fri, 21 Apr 2017 11:25:14 +0200 Markus Rosjat wrote: > so if you have spamd in place in greylisting mode and you have > customers that work with people who use Office365 as a service you > will get calls that emails are delayed for a freaking long time
Email is not instant messaging. Customers need educated to that fact. > > So what are the strategies out there to handle this kind of > situation? Do you let them all pass and trust that microsoft is > protecting there service enough to stop spamming from hijacked > machines that use office365 ? > http://web.britvault.co.uk/products/ungrey-robins/logs/outlook.txt The ungrey-robins tool, with patterns for Outlook, Google, Amazon, etc: http://web.britvault.co.uk/products/ungrey-robins/ > > Just curious here I had a case where you could dig the mx for a > domain and it was a outlook.com server. No. DNS MX records are used for sending mail _TO_ a domain. Inbound mail routing doesn't apply to outbound mail. Domains may relay out via other domains (e.g. their ISP's mail farm). When sending, many domains SMTP HELO with google, outlook, etc... The ungrey-robins tool looks at the HELO hostname, not the FROM domain. See the misc@ thread "spamd and network whitelisting" http://marc.info/?t=148189829200002 Cheers, -- Craig Skinner | http://linkd.in/yGqkv7
