Negative Weight is Set to Zero for Greylist Threshold Test?
Problem reported by Opt-Out - September 6, 2015 at 11:14 AM
Resolved
With Greylist Weight Threshold set to zero (0) we expect any IP that has a negative score to skip greylisting. But they don't seem to. Like many others, We use DNS whitelist(s) to apply negative scores for weighting. Unfortunately it appears that all negative scores are converted to zero for greylist weighting. This means when greylist threshold is set to zero that an incoming email that is weighted as negative 60(-60), which is a great reputation, is still greylisted. You might think setting greylist to 1 is a way to resolve this issue but it just allows anyone to bypass greylisting if they are not on a blacklist yet and they have SPF and reverse DNS set up.
Has anyone else noticed this or have I got it all wrong?

6 Replies

Reply to Thread
0
Opt-Out Replied
The current workaround we have in place for this issue is a DNSBL that gives everyone 1 point. This allows a score of zero to indicate a negative score. It's not pretty but it works. Is anyone else bypassing greylisting based on spam scores?
1
Scott Forsythe Replied
We noticed the same behavior. We tried to generate negative scores to bypass greylisting via DKIM, SPF and RBLs with no luck.
0
Robert Emmett Replied
Employee Post
Opt-Out / Scott, this issue should have been fixed in the latest version of 14.3.  What version are you running?
 
  • Fixed: Negative weights now save correctly when overriding spam weights at the domain level.
Robert Emmett
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Opt-Out Replied
I'm still on 14.2. Are you saying that in 14.3 under Security > Antispam Administration > SMTP Blocking > Greylist Weight Threshold (set to 0)the check will now recognize a negative score rather than round it up to zero? This issue has been in every version I have used and it was never a domain level issue.
2
Robert Emmett Replied
Employee Post
Opt-Out, I spoke too soon.  I didn't fully read your post before responding for which I apologize.  This issue has not been fixed in 14.3, but it has now been identified and fixed.  If the spam weight is less than the specified Greylist Weight Threshold, greylisting will be skipped.  It will be included in the next minor release.
Robert Emmett
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Opt-Out Replied
That's awesome news! Thank you.

Reply to Thread