On Thu, Jun 10, 2010 at 04:55:30PM +0200, Ralf Hildebrandt wrote:
> * Victor Duchovni <victor.ducho...@morganstanley.com>:
> > On Thu, Jun 10, 2010 at 09:50:16AM -0400, Wietse Venema wrote:
> >
> > > If the postmaster address is excluded from spam checks then you
> > > may want to change the address_verify_sender setting.
> > >
> > > The current default is:
> > > address_verify_sender = $double_bounce_sender
> > >
> > > The older (problematic) default is
> > > address_verify_sender = postmaster
> > >
> > > The final ultimate fix is to make address_verify_sender time-dependent,
> > > so that it does not become a spam sink itself.
> >
> > Making it time-dependent address_verify_sender may somewhat compound
> > issues with grey-listing at the origin domain. It is useful to have a
> > value that is stable enough to not repeatedly be subjected to greylisting.
>
> Maybe if it changes once a week (configurable), but the idea is good.
I don't know how long typical greylist whitelist entries last, but even
a week may be too short if greylist whitelists are typically expected
to last longer. Of course sensible folks auto-whitelist client IPs,
rather than (IP, sender, rcpt) triples and in that case, a (long-term)
stable envelope sender is less important.
--
Viktor.
