Re: Comcast & Greylisting

I whitelist these comcast.net blocks:

acl whitelist addr 63.240.76.0/23     # comcast.net (mailfarm) - jwh
acl whitelist addr 204.127.192.0/24   # comcast.net (mailfarm) - jwh
acl whitelist addr 204.127.198.0/24   # comcast.net (mailfarm) - jwh
acl whitelist addr 204.127.200.0/24   # comcast.net (mailfarm) - jwh
acl whitelist addr 204.127.225.0/24   # comcast.net (mailfarm) - jwh
acl whitelist addr 206.18.177.0/24    # comcast.net (mailfarm) - jwh
acl whitelist addr 216.148.227.0/24   # comcast.net (mailfarm) - jwh 

IIRC, comcast.net retries after a few minutes from a different IP address in
the same subnet, then retries later from a third IP address in a different
subnet, then retries later still from the original IP address.

Jim

> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On Behalf 
> Of Brian Ross
> Sent: Wednesday, November 29, 2006 06:09 PM
> To: Greylisting Users and Developers Discussion
> Subject: [Greylist-users] Comcast & Greylisting
> 
> I recently noticed that Comcast and greylisting don't seem to get 
> along....  They appear to be originating mail from the following IPs:
> 
> 	+-----------------+
> 	| relay_ip        |
> 	+-----------------+
> 	| 204.127.192.83  |
> 	| 204.127.192.84  |
> 	| 204.127.200.81  |
> 	| 204.127.200.85  |
> 	| 204.127.225.91  |
> 	| 204.127.225.93  |
> 	| 204.127.225.94  |
> 	| 206.18.177.53   |
> 	| 206.18.177.54   |
> 	| 216.148.227.153 |
> 	| 216.148.227.154 |
> 	+-----------------+
> 
> Which resolve to the following names:
> 	alnrmhc11.comcast.net
> 	alnrmhc13.comcast.net
> 	alnrmhc14.comcast.net
> 	rwcrmhc13.comcast.net
> 	rwcrmhc14.comcast.net
> 	sccrmhc11.comcast.net
> 	sccrmhc15.comcast.net
> 
> Which is interesting because when you look closer there appear to be 
> multiple IPs bound to each of their outbound servers and those IPs 
> are on completely different subnets (which is where greylisting is 
> getting broken, I assume):
> 
> 	alnrmhc11.comcast.net   A       204.127.225.91
> 	alnrmhc11.comcast.net   A       206.18.177.51
> 
> Does anybody have some secret sauce to deal with this?  I'm loathe to 
> just blanket whitelist these IPs.....
> 
> Brian Ross
> IT Engineer, Sr. - Messaging Services
> Postmaster - QUALCOMM, Inc.
> 
> _______________________________________________
> Greylist-users mailing list
> [email protected]
> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users
> 
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.409 / Virus Database: 268.14.19/556 - Release 
> Date: 11/28/06
>  
>