<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt'>
<p>On 02/03/2016 00:23, Steve Walsh wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->Hello Russell<br /><br />
<div class="moz-cite-prefix">On 03/02/2016 12:23 AM, Russell Coker wrote:</div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<pre>Wouldn't it make more sense to have greylisting running on the addresses that
aren't for subscriber-only lists? When a list only allows subscribers to post
it won't benefit from greylisting.
</pre>
</blockquote>
<br /> Taking an example transaction from wikipedia (it's on the internet, it must be true, right?);<br /><br />
<pre><span style="color: blue;">1: 220 smtp.example.com ESMTP Postfix</span>
2: HELO relay.example.org
<span style="color: blue;">3: 250 Hello relay.example.org, I am glad to meet you</span>
4: MAIL FROM:<a class="moz-txt-link-rfc2396E" href="mailto:bob@example.org"><bob@example.org></a>
<span style="color: blue;">5: 250 Ok</span>
6: RCPT TO:<a class="moz-txt-link-rfc2396E" href="mailto:alice@example.com"><alice@example.com></a>
<span style="color: blue;">7: 250 Ok</span>
8: RCPT TO:<a class="moz-txt-link-rfc2396E" href="mailto:theboss@example.com"><theboss@example.com></a>
<span style="color: blue;">9: 250 Ok</span>
<snip>
</pre>
At the moment, postgrey kicks in at line 4. Are you suggesting we (somehow) reconfigure postgrey to start later in the conversation, say around line 6 or 8?<br /><br /> I've spent the last several months trying various modifications on "how to make greylist apply to the receiving domain and not the sender domain", and have not been able to find a way to make greylisting, a sender deferring technology, function at a per-recipient domain level. <br /><br /> Short of writing our own version of the SMTP standard, we're just plain stumped on how we can make this happen. Can you perhaps share a link to a page with instructions on how to make postgrey wait longer in the conversation, and to defer at the recipient domain level, rather than at the first identifying stage of the SMTP transaction like it currently does?<br /><br /> Or, alternatively, are you suggesting that LA runs multiple mail servers for each type of service we currently consolidate down to one machine, such as lists, general mail, RT instances, conferences, etc, and only configure greylisting on the instances that really critically need it?<br /><br /> regards<br /><br /><br /><!-- html ignored --><br />
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">_______________________________________________<br /> linux-aus mailing list<br /><a href="mailto:linux-aus@lists.linux.org.au">linux-aus@lists.linux.org.au</a><br /><a href="http://lists.linux.org.au/mailman/listinfo/linux-aus">http://lists.linux.org.au/mailman/listinfo/linux-aus</a></div>
</blockquote>
<p>We've found greylisting is waste of time these days, as Russ points out, all it does it delay legit mail, their connection has to hit anyway, so better to rely on better configurations... </p>
<p>smtpd_recipient_restrictions = <br /> reject_unknown_sender_domain<br /> reject_unknown_recipient_domain<br /> permit_mynetworks<br /> reject_unauth_destination</p>
<p>...</p>
<p>reject_unknown_client_hostname<br /> reject_unknown_helo_hostname<br /> reject_invalid_helo_hostname<br /> reject_non_fqdn_helo_hostname<br /> reject_non_fqdn_sender<br /> reject_non_fqdn_recipient<br /> reject_unlisted_recipient<br /> reject_unlisted_sender</p>
<p>reject_rbl_client f.oo.bar</p>
<p>....</p>
<p>check_policy_service unix:private/spfpolicy</p>
<p> </p>
<p>..and of course setup amavis with spamassassin etc to catch those that do venture through.</p>
<p>and use the KISS principle with all your mail, not doing so, only asks for problems (its why we at xyz pissed of a large SAN with cluster FS's and replaced it with good 'ol NAS (NFS), been no outages since.)</p>
<p> </p>
<div>-- <br />
<table border="1" width="100%" cellspacing="0" cellpadding="5">
<tbody>
<tr>
<td style="text-align: center;"><small><small>If you have the urge to reply to all rather than reply to list, you best first read http://members.ausics.net/qwerty/</small></small></td>
</tr>
</tbody>
</table>
</div>
</body></html>