[OT] HELP!!! mail attack

[John Summerfield]

Patrick wrote:
> On Thu, 2008-03-27 at 00:58 +1030, Tim wrote:
> [snip]
>>> There's actually a way around it in a crunch...I've put a 5 minute
>>> window.
>> That's really not a solution.  While your server may say, come back in
>> 5, you don't have any control over how, when, or if, the sender will
>> actually retry.
> 
> Afaik greylisting uses an RFC compliant method. So if the sending
> mailserver does not resend after a while then it is broken and should be
> fixed. FWIW I have used greylisting for more than a year now and in all
> that time I have only once seen a mailserver not resend.

If the sender (imagine your favourite biggie)  uses several sending 
MTAs, and each gets a 4xx response, I can imagine at some point the pool 
gives up. I've noticed email on several lists I'm on comes from more 
than one server.





-- 

Cheers
John

-- spambait
1aaaaaaa at coco.merseine.nu  Z1aaaaaaa at coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)