Re: SRS comments/questions

Michel Bouissou <[email protected]> Sat, 16 Jul 2005 10:39:06 +0200
Newsgroups gmane.mail.spam.srs.general
Organization Me, Myself and I
Message-ID <[email protected]>
Le Samedi 16 Juillet 2005 10:03, David Woodhouse a écrit :
>
> Consider these cases...
>
> Firstly... you are offered a mail from [email protected] from a certain
> mail host. You greylist, and a few minutes later the same host offers
> the same mail again. It's accepted.
>
> The next day, you are offered a mail from [email protected] from the
> _same_ mail host as before. Do you gain anything by greylisting?

You're not sure that you receive it from the same _host_. You receive it from 
the same _IP_.

This IP can host a legit enterprise email server, and a whole LAN natted on 
the same IP thru its gateway, with tons of zombie/virussed Windows machines 
that send direct-to-MX crap.

So yes, you definitely gain in keeping greylisting this IP for mails that 
would come from a different domain as the usual legitimate domain(s) that get 
out of the legit server...

-- 
Michel Bouissou <[email protected]> OpenPGP ID 0xDDE8AC6E