[BlueOnyx:03973] Re: greylisting set to defer for 5 minutes, takes hours

[Jim Dory]

On 3/11/2010 10:40 AM, Larry Smith wrote:
> On Thu March 11 2010 13:01, Jim Dory wrote:
>    
>> I've got a third party milter-greylist installed and the config file is
>> set to defer the message for 5 minutes. The ACL shows in the maillog as
>> deferring for 5 minutes. But it takes over an hour and in some cases
>> longer for it to finally accept a message. I'm about to toss it out the
>> window if not that it does stop a bunch of spam that I would think
>> spamassassin and the RBLs would stop without it.
>>
>> It seems it could be that the sending server may not try to resend the
>> message until an hour later, but in the maillog, I do see continuous
>> rejections of the subject email before it eventually is allowed in.
>>
>> thanks, Jim
>>      
> I believe that milter-greylist does not "start" its timer until they stop
> talking, so if a host connects and is told "greylisting for 15 minutes" and
> they immediately reconnect (inside of 15 minutes), the timer starts over
> (at 15 minutes).  Sounds like what we call an "early-talker" (does not
> wait the specified time).
>
> Options are to whitelist that host or contact their IT staff and see if
> their send side cannot be "tuned" to work with you...
>
>    
Thanks Larry - that makes sense. I've whitelisted some ip addresses 
within our framework here and still having some problems with users 
there - but I need to explore those further.  /jd