[OT] HELP!!! mail attack

[Craig White]

On Wed, 2008-03-26 at 12:24 -0430, Patrick O'Callaghan wrote:
> On Wed, 2008-03-26 at 17:49 +0100, Patrick wrote:
> > On Thu, 2008-03-27 at 00:58 +1030, Tim wrote:
> > [snip]
> > > > There's actually a way around it in a crunch...I've put a 5 minute
> > > > window.
> > > 
> > > That's really not a solution.  While your server may say, come back in
> > > 5, you don't have any control over how, when, or if, the sender will
> > > actually retry.
> > 
> > Afaik greylisting uses an RFC compliant method. So if the sending
> > mailserver does not resend after a while then it is broken and should be
> > fixed. FWIW I have used greylisting for more than a year now and in all
> > that time I have only once seen a mailserver not resend.
> 
> We regularly see Yahoo not resend for members of Yahoo Groups. My view
> is that I don't care, but of course you can always whitelist it.
----
and all decent greylisting daemons I'm sure have a whitelisting
mechanism for many known hosts as the one I use does.

And of course, I add the local major Internet provider's SMTP servers to
the white list.

Craig