Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Greylist / Whitelist
  FAQ FAQ  Forum Search   Register Register  Login Login

Greylist / Whitelist

 Post Reply Post Reply
Author
AndrewD View Drop Down
Groupie
Groupie
Avatar

Joined: 03 May 2008
Location: Australia
Status: Offline
Points: 71
Post Options Post Options   Thanks (0) Thanks(0)   Quote AndrewD Quote  Post ReplyReply Direct Link To This Post Topic: Greylist / Whitelist
    Posted: 04 May 2008 at 2:08am

Firstly let me say that on day 2 i am loving this software and cudos to the guys at logsat.

Question relating to the greylist.

We have a small number of senders that are time critical in the delivery of their emails, i note that the greylist notes their IP and the date/time that they were added. Can i simply alter the date/time to say 5 years in the future meaning that this ip will not have to retrain in the default period (60 Days).

also if i add thier IP to the whitelist does this then negate the greylisting?

 

Cheers

Andrew

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 May 2008 at 8:26am
Sure. That feature was added in v4.0.0.773. The release notes are below.

Please do note however that we implemented our own "flavor" of greylisting, and we're not following the "standards" for geylisting as they seem too strict for us. While the "standard" greylisting considers the sender's and the recipient's email address in the delaying of emails, SpamFilter will only consider the sender's IP address. This usually allows an entire ISP to be greyslited only for a few minutes, causing a nearly imperceptible delay to just one of your users - the first one who receives an email from that domain. From then on, once the email is received, the ISP will always pass the greylisting test. While this does allow a few more spammers to go thru, it virtually eliminates any delays and side-effects of greylisting. And furthermore... SpamFilter has awesome filtering abilities :-) so the few extra spam emails will likely be blocked by our other filters.

// New to VersionNumber = '4.0.0.773';
{TODO -cNew : Allowed to specify future dates in the GreyListAllowed.txt files so that IPs can be stored in the list for years without expiring}



Edited by LogSat - 04 May 2008 at 8:31am
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
AndrewD View Drop Down
Groupie
Groupie
Avatar

Joined: 03 May 2008
Location: Australia
Status: Offline
Points: 71
Post Options Post Options   Thanks (0) Thanks(0)   Quote AndrewD Quote  Post ReplyReply Direct Link To This Post Posted: 04 May 2008 at 9:37am
Thanks for that.
I am still confused re the whitelisting and greylisting.
 
If i whitelist an IP address does it still need an entry in the greylistallowed file or does simply putting it in the whitelist then automatically pass it to the greylist allowed listing?
 
Cheers
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 May 2008 at 10:30am
The greylist (and the cached IP blacklist) work on a TCP level before any SMTP commands are given, and thus will take precedence over any other whitelist/blacklist. So adding an IP to the IP whitelist will not override those two filters. The order in which the filters are applied is available at:
http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171#11418


Edited by LogSat - 04 May 2008 at 10:31am
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Rifleman View Drop Down
Groupie
Groupie


Joined: 08 August 2005
Location: United States
Status: Offline
Points: 53
Post Options Post Options   Thanks (0) Thanks(0)   Quote Rifleman Quote  Post ReplyReply Direct Link To This Post Posted: 27 May 2008 at 11:24am
Originally posted by LogSat LogSat wrote:

Sure. That feature was added in v4.0.0.773. The release notes are below.

Please do note however that we implemented our own "flavor" of greylisting, and we're not following the "standards" for geylisting as they seem too strict for us. While the "standard" greylisting considers the sender's and the recipient's email address in the delaying of emails, SpamFilter will only consider the sender's IP address. This usually allows an entire ISP to be greyslited only for a few minutes, causing a nearly imperceptible delay to just one of your users - the first one who receives an email from that domain. From then on, once the email is received, the ISP will always pass the greylisting test. While this does allow a few more spammers to go thru, it virtually eliminates any delays and side-effects of greylisting. And furthermore... SpamFilter has awesome filtering abilities :-) so the few extra spam emails will likely be blocked by our other filters.

// New to VersionNumber = '4.0.0.773';
{TODO -cNew : Allowed to specify future dates in the GreyListAllowed.txt files so that IPs can be stored in the list for years without expiring}

 
Will this eventiually be also placed in the DB?
 
Thanks.
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 27 May 2008 at 7:26pm
Originally posted by Rifleman Rifleman wrote:

Will this eventiually be also placed in the DB?


It's very unlikely. During the greylisting alpha testing stages, we soon found that databases were often not able to sustain the large amount of queries (inserts/deletes) per second needed to handle the incoming flow of connections. All the greylisting lookups/updates are thus performed in RAM by SpamFilter.

The greylisting file is only read when SpamFilter starts, it's not auto-loaded when changes to it are made. As a matter of fact, SpamFilter will overwrite any external changes made to that file when the greylisted IPs are flushed from RAM to the file.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
JeffHildebrand View Drop Down
Newbie
Newbie


Joined: 26 January 2005
Location: United States
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote JeffHildebrand Quote  Post ReplyReply Direct Link To This Post Posted: 06 August 2008 at 1:43pm
If the spamfilter services is stopped, and you make changes to the domains\greylistalllowed.txt, will those changes be read correctly?
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 06 August 2008 at 4:30pm
Jeff,
 
This is actually has more than one answer.
 
For SFI (Non Enterprise)  The short answer is "Yes" to both.
 
For SFE (Running in Enterprise mode) The GreyListAllowed.txt will be read in at startup.  The domain list however is stored in the SQL Database and the text file will be overwritten at startup with the entries in the SQL tables.
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.289 seconds.