News for hackers. Stuff that matters.

A comment on Gmail, We Need to Talk. Parent comment

Re:Gmail, We Need to Talk by dijit on Wednesday November 11, 2015 @03:17AM (#10545399)
>look how nice Greylisting worked in theory, until you realize that most IT or hosting companies don't have a clue how to configure an MTA within RFC specs and do silly things like retrying delivery every 5 mins.

that's what needs to happen for greylisting to work.

it's spambots that don't have the retry ability.

[ Parent | on HN ]
Re:Gmail, We Need to Talk by RawInfoSec on Wednesday November 11, 2015 @07:53AM (#10546395)
Thanks, but you misunderstand my point. Actually you pretty much prove my point that most MTAs are run by those who can't grasp that there are RFC standards out there.

An MTA should never resend after only 5 minutes. It should wait at least 25 minutes before even the first retry.

I've seen many set up to retry every 60 seconds, giving up after 5 tries. One IT tech even told me it was so his boss doesn't have to wait 3 days to get a non-delivery report! Lol.

[ Parent | on HN ]