Back to Community Threads
4
Negative Weight is Set to Zero for Greylist Threshold Test?
Problem reported by Opt-Out - 9/6/2015 at 11:14 AM
Resolved
With Greylist Weight Threshold set to zero (0) we expect any IP that has a negative score to skip greylisting. But they don't seem to. Like many others, We use DNS whitelist(s) to apply negative scores for weighting. Unfortunately it appears that all negative scores are converted to zero for greylist weighting. This means when greylist threshold is set to zero that an incoming email that is weighted as negative 60(-60), which is a great reputation, is still greylisted. You might think setting greylist to 1 is a way to resolve this issue but it just allows anyone to bypass greylisting if they are not on a blacklist yet and they have SPF and reverse DNS set up.
Has anyone else noticed this or have I got it all wrong?

6 Replies

Reply to Thread
0
Opt-Out Replied
10/1/2015 at 9:49 PM
The current workaround we have in place for this issue is a DNSBL that gives everyone 1 point. This allows a score of zero to indicate a negative score. It's not pretty but it works. Is anyone else bypassing greylisting based on spam scores?
1
ScottF Replied
10/26/2015 at 12:01 PM
We noticed the same behavior. We tried to generate negative scores to bypass greylisting via DKIM, SPF and RBLs with no luck.
0
Employee Replied
10/27/2015 at 9:40 AM
Employee Post
Opt-Out / Scott, this issue should have been fixed in the latest version of 14.3.  What version are you running?
 
  • Fixed: Negative weights now save correctly when overriding spam weights at the domain level.
0
Opt-Out Replied
10/27/2015 at 10:40 AM
I'm still on 14.2. Are you saying that in 14.3 under Security > Antispam Administration > SMTP Blocking > Greylist Weight Threshold (set to 0)the check will now recognize a negative score rather than round it up to zero? This issue has been in every version I have used and it was never a domain level issue.
2
Employee Replied
10/27/2015 at 11:59 AM
Employee Post
Opt-Out, I spoke too soon.  I didn't fully read your post before responding for which I apologize.  This issue has not been fixed in 14.3, but it has now been identified and fixed.  If the spam weight is less than the specified Greylist Weight Threshold, greylisting will be skipped.  It will be included in the next minor release.
0
Opt-Out Replied
10/27/2015 at 12:27 PM
That's awesome news! Thank you.
Back to Community Threads

Reply to Thread

Related Knowledge Base Articles

Recommended SPAM SettingsSmarterMail > Antispam and Antivirus
Set up Autodiscover for SmarterMailSmarterMail > Installation and Configuration
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Upgrading SmarterMail (Domain Conversion)SmarterMail > Installation and Configuration
Set up SmarterMail as an IIS Site in IIS 8SmarterMail > Server Configuration and Management