>...
>
>If an incomming email is from a IP listed in IP whitelist, we don't
>need to check it at all.
>The whitelist I mentioned here is a large-scale one. Say Microsoft and
>Yahoo's IPs should be added to IP whitelist since we suppose they
>won't send spams.
>Currently I am maintaining a RBL list, and hopefully the IP whitelist
>will help to reduce false positive.
>
>On 5/13/05, Matt Kettler <[EMAIL PROTECTED]> wrote:
>> Ryan L. Sun wrote:
>> >...
>> > -Ryan
>> >
>> 
>>...
>>
>
>

        I assume you are using these as just examples;  Microsoft is very
good, and I haven't seen any spam ever from microsoft.com, and none in over
an year from any MSN/Hotmail servers, but Yahoo still has problems (they have
greatly descreased the flow, but some spam still misses their internal filter
mechanism).  Better still is the gmail you are using yourself - While they
are very commonly used for a maildrop (as is Yahoo!), they seem to never
originate spam.

        I think "whitelist"'ing all of these company's domains is safe, but
their IPs can still be abused (well maybe not microsoft.com, unless the
person expects to leave or get fired *and* have legal action brought against
himself, by MS themselves).

        Paul Shupak
        [EMAIL PROTECTED]

Reply via email to