greylisting DNSBL hosts?
Kilian Krause <[email protected]>
| Newsgroups | gmane.mail.exim.spamassassin |
|---|---|
| Message-ID | <1097235499.18184.30.camel@ganymede> |
Hi, I just came across a quite interesting idea. Greylisting naturally makes only sense if the remote end is no MTA, but a direct TCP connection. All MTAs will come back and thus greylisting will only introduce latency which most admins will see as neccessary tradeoff for reduced spam. As sa-exim greylisting will scan a message every time before asking the sending MX to come back later, this is bound to produce loads of sysload on the receiving MX, isn't it? How about moving over to the existing information of DNSBL servers and perusing their information to at least have an intelligent best guess who is sending from an IP that may not be an MTA? (obviously presuming that all non-dialup-hosts could just dump their spam to the local MTA and thus have it queued for later re-sending) Has anyone yet produced a config of say exim4 and greylistd using DNSBL for dialup hosts to trigger greylisting? That way all "regular" MTAs of providers and such remain whitelisted, and all dialup IPs may come back if they're a legitimate MTA for some sending user. If someone has any idea how to have exim4-daemon-heavy use the DNSBL for this, i'm all ears. Thanks! -- Best regards, Kilian _______________________________________________ SA-Exim mailing list [email protected] http://lists.merlins.org/lists/listinfo/sa-exim
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQBBZnwrvdkzt4X+wX8RAjDZAJ0YtJdnq2gjquvFieWLxo/nUojTPACeP7E8 GhdQX2pDl35fnfOlRXoxbPA= =uURN -----END PGP SIGNATURE-----