Re: [apps-discuss] A greylisting question

[Dave CROCKER <[e-mail]>]

On 2/16/2012 11:35 PM, Murray S. Kucherawy wrote:
> I suspect the IESG will ask this if we don’t cover it, so let’s put something in
> about this now…
>
> The current draft only talks about IPv4, because that’s what we have experience
> with so far in terms of greylisting. How does our advice translate to IPv6? Is
> it the same?


There will, at least, be some differences and possibly many.  But since we have 
no experience with this stuff in that space, we can't be sure.  There is no 
practice that we can declare 'best'.  At most, we can add a comment 
acknowledging the topic and commenting on some basic issues.

Something along the lines of:

      At the time of this writing, there is no widespread experience with 
greylisting as applied to sources using IPv6 addresses.  The greater size of an 
IPv6 address seems likely to permit differences in behaviors by bad actors, and 
this could well mean needing to alter the details for applying greylisting; it 
might even negate any benefits in using greylisting at all.  At a minimum, it is 
likely to call for different specific choices for any greylisting algorithm 
variables.

d/

-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net