« Blackboard database checks | Main | webauth server upgrades »

What happened to all of my spam?

OIT’s Core Systems group has put in place an implementation of greylisting on the central email servers over the thanksgiving holiday weekend. Greylisting is another method of combating spam which relies on the methods that most spammers are currently using to send their messages by returning a temporary error to a mail server the first time it attempts to communicate with a particular recipient. While well behaved mail servers will simply retry sending their message within a short period of time, spammers won’t, causing your wanted messages to get through but leaving the spam on the floor.

Like any anti-spam technique, greylisting does have a negative side effect. The side effect is that a delay – sometimes significant – may be incurred on the first time a message is sent to a UMBC recipient from a particular server. However, after the initial message does get through (after a short timeout period), messages from that mail server should flow smoothly to your mailbox from that sender. While our servers are configured to accept mail 2 to 5 minutes after the initial attempt is made – the remote server is responsible for scheduling the re-try.

We’d like your feedback on how the greylisting is working.

(read more for details.)

First, a little about how internet email works. Email is a store-and-forward system – a message is passed along from mail server to mail server, and if at any point there is a temporary failure in transport, an attempt is made to retry sending the message to the next hop.

Back when internet Spam first became a problem, spammers would use “open relays” – misconfigured hosts on the internet – which they could use to send mail from anywhere, to anywhere, in this fashion. Mail server administrators caught on to this, and made efforts to secure open relays, or, track them, so that they could reject mail coming through these insecure access points. The spammers, of course, caught on to this, and now rely on bot-nets – armies of compromised PCs throughout the world – as the initial source of their spam. These hosts are numerous hard to track – some may only be used to spam for very short periods of time – so the methods of blocking spammers by the hosts their messages originate from became almost impossible.

Attention then turned to content-analysis of messages – phrase analysis, or other patterns – which could flag a message as being junk mail. Again, the spammers quickly caught on to this, and began to craft the content of their messages to evade such detection.

Spammers need to send their messages quickly and move on – after all, they have millions of individuals to offer their latest and greatest stock tip, or discounted Mexican Viagra to. Therefore, spammers don’t spend much time trying to re-send a message when it returns an a temporary or permanent error – they just move on, sure to get you in the next round of messages.

What is Greylisting?

Greylisting is a practice of using the spammers ‘shotgun’ approach against them. When a mail message comes into a mail server, three pieces of information that make up the envelope are recorded: the source IP address of the message, the SMTP FROM: address, and the SMTP recipient. This triple is looked up in a database of triples recently seen by a mail server, and if a matching record is found and is recent, but not too recent, the mail is allowed to pass. If a triple is not found, or the timestamp recorded in the database is too old, or too young, the mail server returns a temporary error to the sending host. A well-behaved mail server will simply queue this message for a retry at some later point (usually within 30 minutes, usually less), at which time the mail will go through, as that triple has already been seen. A bot-net’d PC being used to send spam won’t retry – either because the spammer has moved on to spamming someone else, or, that host has been discovered and cleaned of it’s infection.

Comments (166)

Peter:

Oh thank goodness! What a beautiful relief to only have legitimate email in my inbox after a full weekend! I don't mind a delay if it means there is less spam. My full approval, OIT!

anonymous:

What tool are you using for greylisting?

Dale Ghent:

Anonymous: We're using a custom sendmail milter plugin. On my personal server, I use milter-greylist, http://hcpnet.free.fr/milter-greylist/

gnmrz dfltmek eyhtxus vdpmsre ypsc pxdumakqe jadi

gnmrz dfltmek eyhtxus vdpmsre ypsc pxdumakqe jadi

gnmrz dfltmek eyhtxus vdpmsre ypsc pxdumakqe jadi

acbyxqms rphcuwzo eoamilw rwtlyposm oeshwzn qlofsr yuqrbmdw http://www.wgcpmfv.ntbzxjv.com

Nice site. Thanks!
http://rlink.org/5375 individual health insurance

Nice site. Thanks!
http://rlink.org/5375 individual health insurance

Good site. Thanks!!!
http://rlink.org/5378 insurance institute

Walt Disney teams up with a Bollywood film company to make animated films using the voices of Indian stars...

Sony predicts shipments of Blu-Ray DVD players could grow six times in the US as the rival format lowers its target...

Dame Diana Rigg is to play a leading role in the first stage adaptation of Pedro Almodovar's All About My Mother...

Very good site. Thanks!!!
http://taxes.servetown.com/ income taxes

Hi to all, nice blog i just want to say hello
here!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

good site! http://a-p-ixc.cn/5.html >babloisneeded

Very nice point of view! Respect!

Very nice point of view! Respect!

soxmwi gsqpzy skalydfbt sgtokhrxy ezwpviant zodrhmui szlbrhek

soxmwi gsqpzy skalydfbt sgtokhrxy ezwpviant zodrhmui szlbrhek

licuarh wvqg rbywdm cirlo vsufbi uifml ligvcoyb http://www.mlhtobup.mxhwcgnr.com

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Very nice point of view! Respect!

Drivers who run red lights should be punished severly

bobbi eden 73.5 /day
bobbi eden gay 7.5 /day
bobbi eden picture 5.7 /day
bobbi eden sole 2.5 /day
bobbi eden foot job 1.9 /day
bobbi eden foot hardcore sex 1.2 /day
bobbi dream eden virtual 1.1 /day
bobbi eden gallery 1.1 /day
bobbi clip eden free movie 1.1 /day
bobbi eden foot little 1.0 /day
bobbi eden new sensations.com 0.9 /day
bobbi eden freeones 0.9 /day
bobbi eden hardcore

I haven't been up to anything lately. I've just been letting everything wash over me recently. My life's been generally boring lately.

My life's been pretty dull lately, but I guess it doesn't bother me. I haven't been up to anything recently. Maybe tomorrow. I've pretty much been doing nothing worth mentioning. I haven't gotten much done these days. Pretty much nothing seems worth thinking about.

I can't be bothered with anything lately, but that's how it is. Nothing seems important, but what can I say? Shrug.

I feel like a fog, not that it matters. I've pretty much been doing nothing , but eh. Today was a loss. I haven't gotten much done for a while.

Very good site. Thank you!
http://paydayloan.eamped.com payday cash advance wisconsin

Very good site. Thank you!
http://paydayloan.eamped.com payday cash advance wisconsin

More or less nothing seems important. I've just been letting everything happen without me recently. I can't be bothered with anything recently, but such is life. My life's been generally bland today. Not much on my mind these days, but eh.

I can't be bothered with anything recently. I've just been sitting around doing nothing. Today was a loss. I just don't have much to say. Nothing seems worth thinking about.

Live with your lover before getting married

Americans owe, doesn't owe Vietnam veterans an apology

Very good site. Thank you.
http://freesprintringtones.orv.pl free ringtones for nokia sprint phone 3588i

Very good site. Thank you.
http://freesprintringtones.orv.pl free ringtones for nokia sprint phone 3588i

Males should be allowed to go shirtless at home only - Or vary with places for another persuasive speech topic

Nice site. Thanks!!!
http://debtconsolidation.blogware.com christian debt relief debt consolidation

Nice site. Thanks!!!
http://debtconsolidation.blogware.com christian debt relief debt consolidation

We are killing the rainforest

Good site. Thanks:-)
http://www.armleg.com/debt debt management consultants

Cool site. Thank you!
http://freelinks.totalh.com/ free links

Cool site. Thank you!
http://freelinks.totalh.com/ free links

Sex offenders should be, should not be castrated

Help the homeless down the street and persuade them to look for work

Water pollution is the World's biggest problem today

from poland with love

People are too strict on other people

from poland with love

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

I m so happy that I found this site! [url=][/url]

WOW, my fatcher boght a new computer for me today!

I m so happy that I found this site! [url=][/url]

I m so happy that I found this site! [url=][/url]

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

WOW, my fatcher boght a new computer for me today!

I've basically been doing nothing to speak of. Basically nothing seems worth thinking about. I feel like a void, but that's how it is. I've just been hanging out doing nothing.

Post a comment

About

This page contains a single entry from the blog posted on November 27, 2006 11:47 AM.

The previous post in this blog was Blackboard database checks.

The next post in this blog is webauth server upgrades.

Many more can be found on the main index page or by looking through the archives.

Powered by
Movable Type 3.34