Morning @devs/techs

Is there anyway you can improve the greylisting feature to bypass certain domains if they are on the SPF trusted list.  It makes no sense to apply grey listing to trusted domains. A simple SPF check along on the connection should normally be enough to allow emails to pass into the corporate network quicker. Presently you are grey listing everything and companies like eBay use a farm of IP addresses which means clients are waiting hours to receive emails.  Either an option to allow the big company IP ranges or an option we can switch on or off to apply SPF before greylisting to allow quicker delivery of email...??

Thanks, James

James,

There are two stages of filters:

1. Front-door filters - these filters apply during SMTP envelope conversation. GreyListing happens at this stage.
2. Downstream filters - these filters come into the picture once the entire email has been received and the Rules Engine starts assigning scores.

The concept of "Trusted SPF" does not exist until the second stage. Significant time-consuming processing occurs on the message before the second stage start. Many connecting clients will end-up in Timeout errors if this processing is done at the envelope level.

By the way, you can always add these domains in $INSTALL_DIR\config\ExcludedDomainsForGreyListing.dat . See http://xeams.com/GreyListing.htm for details

Hi again,

I completely understand that more processing is required during this window however tarpitting is also used during an SMTP session which does not result in genuine mail servers dropping  connections with timeouts. There should be some sort of 'urgent bypass list' in order not to delay very important emails. It doesn't have to be with pre SPF checks, it could just be pre-defined IP addresses that get the green light from the first connection attempt. Adding just domains won't help as anyone can spoof a domain name without at least an SPF check. IP addresses are a little more tricky especially if TLS is involved. 

James

Hi again,

qq, does the server.properties file have to have the extension .properties or will server.properties.txt suffice as the file does not exist in the directories I have seen..?

Also, could you please add the option to exclude IP's too in your future releases. Surly it can't be that difficult to at least give the users the option to filter by IP should they choose to.

Thanks,

James

Hi - Just a quick follow up on this?

Thanks, James

The file name MUST be server.properties, not server.properties.txt

A quick way to confirm if Xeams is reading server.properties file correctly is to look at About Xeams under Tools. You should see the variables specified in server.properties on this screen.

I'm just a little confused - in the greylisting options there is a section to add domain names AND IP addresses to the exclusion list. 

Can you please clarify if this is actually functional or not as the entire thread is based on if you could add this option yet you mention it would take up too much server resources..?

thanks, James

Just a quick reminder.. Getting a few questions on this...

Regards,

James

James,

We will add the ability to ignore certain IP addresses from greylisting in the next update.

Great - thanks

Rgds, James