On Wed, 31 Oct 2007, cour...@thefreecat.org wrote:

Utter nonsense. Greylisting doesn't work. It falls over flat on it's face the moment it is exposed to multi-homed senders (which is, BTW, RFC compliant and valid). Normally it only delays mail (which is bad). When the sender is multi-homed, it can delay mail hugely.

Just adding the whole class C network to the greylist is a bodge that doesn't work. IIRC, gmail's servers are on multiple class Cs. There are perfectly valid reasons why one might want to run their systems with such a setup (network failure redundancy or peering arrangements).

Yes, Yahoo use it - but that doesn't make it any less broken. I know for a fact that their users get their mail with delays varying between minutes and hours, which is IMNSHO unacceptable if it is a permanent situation.

If you're using greylisting, you might as well save yourself some server load and use unlisting instead. It'll put less load on the servers and be no more broken than greylisting. Anyone who tells you otherwise is either ignorant or trying to sell you something.

You _might_ get somewhere more meaningful if you greylist by (from, to) rather than (ip, from, to), but last time I checked, most tools didn't allow for this.

</RANT>

Gordan