Re: [apps-discuss] I-D Action: draft-ietf-appsawg-greylisting-05.txt

Dave Crocker <dhc@dcrocker.net> Wed, 14 March 2012 20:11 UTC

Return-Path: <dhc@dcrocker.net>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DAA421E8010 for <apps-discuss@ietfa.amsl.com>; Wed, 14 Mar 2012 13:11:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.607
X-Spam-Level:
X-Spam-Status: No, score=-6.607 tagged_above=-999 required=5 tests=[AWL=-0.008, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5bkGcNxj63ow for <apps-discuss@ietfa.amsl.com>; Wed, 14 Mar 2012 13:10:56 -0700 (PDT)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) by ietfa.amsl.com (Postfix) with ESMTP id 0A59C21E800E for <apps-discuss@ietf.org>; Wed, 14 Mar 2012 13:10:56 -0700 (PDT)
Received: from [192.168.1.11] (adsl-67-127-58-62.dsl.pltn13.pacbell.net [67.127.58.62]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id q2EKAn8N004724 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 14 Mar 2012 13:10:55 -0700
Message-ID: <4F60FB31.80209@dcrocker.net>
Date: Wed, 14 Mar 2012 13:10:25 -0700
From: Dave Crocker <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
To: "Murray S. Kucherawy" <msk@cloudmark.com>
References: <20120222184536.6635.42117.idtracker@ietfa.amsl.com> <9452079D1A51524AA5749AD23E003928042C26@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808B2F9@exch-mbx901.corp.cloudmark.com>
In-Reply-To: <9452079D1A51524AA5749AD23E00392808B2F9@exch-mbx901.corp.cloudmark.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.17]); Wed, 14 Mar 2012 13:10:55 -0700 (PDT)
Cc: "apps-discuss@ietf.org" <apps-discuss@ietf.org>
Subject: Re: [apps-discuss] I-D Action: draft-ietf-appsawg-greylisting-05.txt
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Mar 2012 20:11:01 -0000

On 3/14/2012 12:50 PM, Murray S. Kucherawy wrote:
>     7.  An ADMD's own submission service (see [SUBMISSION]) SHOULD NOT
>         apply greylisting checks.  Alternately, an ADMD could simply
>         exempt internal IP addresses from being greylisted, as described
>         in the previous point.
>
> Seems reasonable to me.  Others?


I think the general form of this is:

    7.  Greylisting SHOULD NOT be applied by an ADMD's submission service (see 
[SUBMISSION]) for authenticated client hosts.  Authentication can include 
whatever mechanisms are deemed appropriate for the ADMD, such as known internal 
IP addresses, SASL or the like.



The "alternately" is confusing to me.  Is it meant to apply to non-submission 
services?  If so, then this rule needs something broader, such as:

    7.  Greylisting SHOULD NOT be applied to client hosts internal to the ADMD 
or otherwise part of the ADMD's operation, such as having membership on a list 
of exempt IP Addresses.

d/
-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net