Greylist / Whitelist |
Post Reply |
Author | |
AndrewD
Groupie Joined: 03 May 2008 Location: Australia Status: Offline Points: 71 |
Post Options
Thanks(0)
Posted: 04 May 2008 at 2:08am |
Firstly let me say that on day 2 i am loving this software and cudos to the guys at logsat. Question relating to the greylist. We have a small number of senders that are time critical in the delivery of their emails, i note that the greylist notes their IP and the date/time that they were added. Can i simply alter the date/time to say 5 years in the future meaning that this ip will not have to retrain in the default period (60 Days). also if i add thier IP to the whitelist does this then negate the greylisting?
Cheers Andrew |
|
LogSat
Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
|
Sure. That feature was added in v4.0.0.773. The release notes are below.
Please do note however that we implemented our own "flavor" of greylisting, and we're not following the "standards" for geylisting as they seem too strict for us. While the "standard" greylisting considers the sender's and the recipient's email address in the delaying of emails, SpamFilter will only consider the sender's IP address. This usually allows an entire ISP to be greyslited only for a few minutes, causing a nearly imperceptible delay to just one of your users - the first one who receives an email from that domain. From then on, once the email is received, the ISP will always pass the greylisting test. While this does allow a few more spammers to go thru, it virtually eliminates any delays and side-effects of greylisting. And furthermore... SpamFilter has awesome filtering abilities :-) so the few extra spam emails will likely be blocked by our other filters. // New to VersionNumber = '4.0.0.773'; {TODO -cNew : Allowed to specify future dates in the GreyListAllowed.txt files so that IPs can be stored in the list for years without expiring} Edited by LogSat - 04 May 2008 at 8:31am |
|
AndrewD
Groupie Joined: 03 May 2008 Location: Australia Status: Offline Points: 71 |
Post Options
Thanks(0)
|
Thanks for that.
I am still confused re the whitelisting and greylisting.
If i whitelist an IP address does it still need an entry in the greylistallowed file or does simply putting it in the whitelist then automatically pass it to the greylist allowed listing?
Cheers
|
|
LogSat
Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
|
The greylist (and the cached IP blacklist) work on a TCP level before any SMTP commands are given, and thus will take precedence over any other whitelist/blacklist. So adding an IP to the IP whitelist will not override those two filters. The order in which the filters are applied is available at:
http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171#11418 Edited by LogSat - 04 May 2008 at 10:31am |
|
Rifleman
Groupie Joined: 08 August 2005 Location: United States Status: Offline Points: 53 |
Post Options
Thanks(0)
|
Will this eventiually be also placed in the DB?
Thanks.
|
|
LogSat
Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
|
It's very unlikely. During the greylisting alpha testing stages, we soon found that databases were often not able to sustain the large amount of queries (inserts/deletes) per second needed to handle the incoming flow of connections. All the greylisting lookups/updates are thus performed in RAM by SpamFilter. The greylisting file is only read when SpamFilter starts, it's not auto-loaded when changes to it are made. As a matter of fact, SpamFilter will overwrite any external changes made to that file when the greylisted IPs are flushed from RAM to the file. |
|
JeffHildebrand
Newbie Joined: 26 January 2005 Location: United States Status: Offline Points: 15 |
Post Options
Thanks(0)
|
If the spamfilter services is stopped, and you make changes to the domains\greylistalllowed.txt, will those changes be read correctly?
|
|
Desperado
Senior Member Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
|
Jeff,
This is actually has more than one answer.
For SFI (Non Enterprise) The short answer is "Yes" to both.
For SFE (Running in Enterprise mode) The GreyListAllowed.txt will be read in at startup. The domain list however is stored in the SQL Database and the text file will be overwritten at startup with the entries in the SQL tables.
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
Post Reply | |
Tweet
|
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.289 seconds.