Greylist / Whitelist
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6470
Printed Date: 27 December 2024 at 12:26pm
Topic: Greylist / Whitelist
Posted By: AndrewD
Subject: Greylist / Whitelist
Date Posted: 04 May 2008 at 2:08am
|
Firstly let me say that on day 2 i am loving this software and cudos to the guys at logsat. Question relating to the greylist. We have a small number of senders that are time critical in the delivery of their emails, i note that the greylist notes their IP and the date/time that they were added. Can i simply alter the date/time to say 5 years in the future meaning that this ip will not have to retrain in the default period (60 Days). also if i add thier IP to the whitelist does this then negate the greylisting?
Cheers Andrew |
Replies:
Posted By: LogSat
Date Posted: 04 May 2008 at 8:26am
|
Sure. That feature was added in v4.0.0.773. The release notes are below.
Please do note however that we implemented our own "flavor" of greylisting, and we're not following the "standards" for geylisting as they seem too strict for us. While the "standard" greylisting considers the sender's and the recipient's email address in the delaying of emails, SpamFilter will only consider the sender's IP address. This usually allows an entire ISP to be greyslited only for a few minutes, causing a nearly imperceptible delay to just one of your users - the first one who receives an email from that domain. From then on, once the email is received, the ISP will always pass the greylisting test. While this does allow a few more spammers to go thru, it virtually eliminates any delays and side-effects of greylisting. And furthermore... SpamFilter has awesome filtering abilities :-) so the few extra spam emails will likely be blocked by our other filters. // New to VersionNumber = '4.0.0.773'; {TODO -cNew : Allowed to specify future dates in the GreyListAllowed.txt files so that IPs can be stored in the list for years without expiring} ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: AndrewD
Date Posted: 04 May 2008 at 9:37am
|
Thanks for that.
I am still confused re the whitelisting and greylisting.
If i whitelist an IP address does it still need an entry in the greylistallowed file or does simply putting it in the whitelist then automatically pass it to the greylist allowed listing?
Cheers
|
Posted By: LogSat
Date Posted: 04 May 2008 at 10:30am
|
The greylist (and the cached IP blacklist) work on a TCP level before any SMTP commands are given, and thus will take precedence over any other whitelist/blacklist. So adding an IP to the IP whitelist will not override those two filters. The order in which the filters are applied is available at:
http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171#11418 - http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171#11418 %20 - ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Rifleman
Date Posted: 27 May 2008 at 11:24am
Will this eventiually be also placed in the DB?
Thanks.
|
LogSat wrote:Posted By: LogSat
Date Posted: 27 May 2008 at 7:26pm
It's very unlikely. During the greylisting alpha testing stages, we soon found that databases were often not able to sustain the large amount of queries (inserts/deletes) per second needed to handle the incoming flow of connections. All the greylisting lookups/updates are thus performed in RAM by SpamFilter. The greylisting file is only read when SpamFilter starts, it's not auto-loaded when changes to it are made. As a matter of fact, SpamFilter will overwrite any external changes made to that file when the greylisted IPs are flushed from RAM to the file. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: JeffHildebrand
Date Posted: 06 August 2008 at 1:43pm
| If the spamfilter services is stopped, and you make changes to the domains\greylistalllowed.txt, will those changes be read correctly? |
Posted By: Desperado
Date Posted: 06 August 2008 at 4:30pm
|
Jeff,
This is actually has more than one answer.
For SFI (Non Enterprise) The short answer is "Yes" to both.
For SFE (Running in Enterprise mode) The GreyListAllowed.txt will be read in at startup. The domain list however is stored in the SQL Database and the text file will be overwritten at startup with the entries in the SQL tables. ------------- The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |