Educause Security Discussion mailing list archives

Re: Exchange Server Virus Scanning


From: Jeremy Mooney <j-mooney () BETHEL EDU>
Date: Fri, 17 Feb 2006 22:25:54 -0600

Graham Toal wrote on 2006/02/17 13:36:
If you are looking at commercial appliances, do ask if they
can offer greylisting.  It really is worth it.  There's a
couple of small gotchas however.  One is that if you have
multiple spamfilter or mail servers and they are load balancing
(equal valued MX records, or hardware load-balancing like an F5)
then you *must* get a greylist solution which shares its state
between the multiple servers in real time, otherwise you can
have senders back off to a different MX host and end up suffering
multiple greylist retry delays.

I'm not aware of any freeware systems that do this properly.

milter-greylist (http://hcpnet.free.fr/milter-greylist/) handles this well.

--
Jeremy Mooney
ITS - Bethel University

Current thread: