Re: SRS comments/questions
Michel Bouissou <[email protected]> Sat, 16 Jul 2005 10:39:06 +0200
| Newsgroups | gmane.mail.spam.srs.general |
|---|---|
| Organization | Me, Myself and I |
| Message-ID | <[email protected]> |
Le Samedi 16 Juillet 2005 10:03, David Woodhouse a écrit : > > Consider these cases... > > Firstly... you are offered a mail from [email protected] from a certain > mail host. You greylist, and a few minutes later the same host offers > the same mail again. It's accepted. > > The next day, you are offered a mail from [email protected] from the > _same_ mail host as before. Do you gain anything by greylisting? You're not sure that you receive it from the same _host_. You receive it from the same _IP_. This IP can host a legit enterprise email server, and a whole LAN natted on the same IP thru its gateway, with tons of zombie/virussed Windows machines that send direct-to-MX crap. So yes, you definitely gain in keeping greylisting this IP for mails that would come from a different domain as the usual legitimate domain(s) that get out of the legit server... -- Michel Bouissou <[email protected]> OpenPGP ID 0xDDE8AC6E