GRYNX

15th 2006f September, 2006

Greylist – freeware Grey list for Exchange v1.0

by @ 3:18. Filed under
Greylist
This is an old version – click here for latest version
Since I have had a lot of problems with false positives with the black lists that I’m using on my Exchange 2003 server I started looking into another way of filtering spam.
The obvious choice of additional protection fell on grey listing ( you can read more about what it is here ).
The problem with this is that there doesn’t seem to be any free products out there for Exchange and as I don’t want to set up a Linux box ( yet another box in the rack ) I decided to write one myself.

I don’t claim to be a world class programmer but my implementation seems to work just fine and that shows as I have a 98% block rate on incoming traffic.
Usually i receive 3500-4000 spam attempts per day so that means that 70 mails a day are slipping trough. These 70 get matched to a blacklist that is not that aggressive and the result of this is that my spam level has gone down to almost 0% while I haven’t had a single false positive yet.

About the program. It consists of two parts.

Requirements:

Features:
Greylist

Greylist admin

This is an old version – click here for latest version

Install package Greylist_v1.0.zip
Documentation Readme.doc
Source Greylist Greylist_v1.0_vs.net_source.zip
Source Greylist admin GreylistAdmin_v1.0_vs.net_source.zip

What does it cost?
Nada. Nothing. It’s for free!
See it as a contribution to a better world :) A free contribution! I’ve released this under a Creative Commonce license, which comes down to that you can use it and redistribute it as long as you refer to me and this site while using any part of my program. The full license is available in the readme file.

The program is distributed ‘as-is’ and I don’t intend to provide any support for it.
But feel free to send me any suggestions to improvements or your own modifications.

Cheers,
Chris

25 Responses to “Greylist – freeware Grey list for Exchange v1.0”

  1. Tony Bullclip Guy Says:

    Oh I See i get a mention for the bullclip thingy which was just a passing comment and no mention for the hours of Interuption to explain program Flow. *?%%ing Network administrators. 😉
    No actually this is a rather good building block look forward to tedious hours explaining encapsulation in Version 2.0

  2. Heywood J. Blaume Says:

    This thing is fantastic. I was struggling with configuring an upstream Postfix-based greylisting SMTP server for my small Exchange server environment, but I found this and it works exactly as advertised. Thanks so much for your contribution.

  3. Jeroen Says:

    Great tool, one remark: Our production platform sends mail via SMTP through our Exchange server.
    The tool we use for this doesn’t retry, so all mail is stamped as spam. Whitelisting was the only option.

  4. Henrik Says:

    Hi

    Great tool!
    Could you make it work with Microsoft POP3 Services or does anyone know of any free anti-spam/greylisting?

    (http://www.windowsnetworking.com/articles_tutorials/Windows_POP3_Service.html)

  5. Chris J. Says:

    Henrik: You could definetly write a greylist filter for the standard smtp service that comes with 200x, but it lacks some functionality that I’m using in my implementation.
    So, the way it’s written today it will only work if you’re using Exchange.

    Jeroen: What you did is completely right. As default it won’t make a difference between the inside or the outside so you need to whitelist any servers on the inside.

    Cheers,
    Chris

  6. Henrik Says:

    Hi Chris
    Yes! It seems to work with Microsoft POP3 Services :)

  7. Attilio Drei Says:

    Yet another version Here for IIS smtp.
    http://attiliodrei.no-ip.com/greylisting/

  8. Chuck Veillon Says:

    Will future versions allow wildcarding inside the whitelist? Tried whitelising 63.23.195.*, but doesn’t seem to work.
    Thanks for making a wonderful piece of software!!!
    with best regards,
    Chuck

  9. Chris J. Says:

    Chuck: Yes definetly. I miss it myself too.

  10. Piethein Strengholt Says:

    Works great! Nice tool!!

  11. Chuck Veillon Says:

    How can you remove this completely? After running “disable” there are four files I cannot delete.

  12. Chuck Veillon Says:

    I’ve rebooted the server and was able to remove it completely. Ended up not being able to use it. After three days our table had over 14k records and stopped processing emails to Exchange. The admin app did report errors with my whitelist IP and email address inputs (note: I put in IPs just like in the readme – xxx.xxx.xxx.xxx format), but was working fine the day before. If you have some ideas or things to try, I would love to hear about it!

    with best regards,
    Chuck

  13. Allen Says:

    Hi Chris,
    First of all I would like to thank you for this very nice tool, It’s great for our small office of about 15 users.
    One thing I was wondering was is it possible to have the greylist execute after our connection and recipient filtering in exchange?
    I’ve looked over most of the property sheets in Exchange Admin and can not see how or if this is possible.
    The issue is looking at the log and database I can see that a very large percent of the messages would be blocked
    by connection and recipient filtering, the main reason I am concerned is that after only 3 hours of greylisting
    my database has over 500 rows and is growing rapidly.

    Thanks again for a great tool
    Allen

  14. Ian Says:

    Well, this seems a great tool. Certainly stopped most spam cold. Only problem is I seem to be getting an error whenever I enter a whitelist item (Ip or email)

    The error “Failed to enable constraints. One or more rows contain values violatiing non-null, unique or foreign-key restraints”

    I cleared out the list and reentered them carefully but it still does it. Seems to still work and seems to recognise the whitelist

    Nice job

    Regards
    Ian

  15. Chris J. Says:

    Allen: Yes you can do this by changin the source priority to a higher value in the enable.cmd script. It’s set to 77 as default which means that it will execute before all other filters. You can use enum.cmd to see where it is in relation to the other filters.

    I wouldn’t recommend it though!! The reason for you getting 500 entries in three hours is because the greylist is working. This is normal. I get 3500-5000 new entries in my database daily and this continous flow of spam was the reason for me to write Greylist in the first place.

    Cheers,
    Chris

  16. Pär Rohlin Says:

    Great tool …
    I have a problem though. Even If i put my backend server in the white list it seems like I have problems sending mail, all outgoing mail queuing up on the backend.
    Any ides?

  17. Allen Says:

    Thanks Chris

    Allen

  18. Finn Køpke Says:

    Great tool
    I also have a problem. It seems that the SPAM is stopped but now it
    seems like I have problems sending mail trough my frontend server, all outgoing mail queuing up on the exchange

  19. Piethein Strengholt Says:

    My programming skills are not that good so is it possible to extent the program with an option to move spam to the junk folder of exchange or to specify a folder (within the public folders) for example. My clients complain that some email is missing.

  20. Chris J. Says:

    Finn: Try to add all sending servers to the source ip whitelist.

    Cheers,
    Chris

  21. Finn Køpke Says:

    It works – Thanks

  22. Henrik Says:

    Hi Chris

    I still try this great tool out and trying to fix et work on MS POP3 service.
    For now I use it on an Exchange server, but get this web enabled:
    abc.com #5.5.0 smtp;554 : Relay access denied

    When disable, mail get in my mailbox, but SPAM do to then :-(

    Henrik

  23. Allen Says:

    Hi Chris,

    I am trying to make some slight changes to the app and ran into a snag when it came to setting up the debugger environment.
    Can you give me any tips on how you did this?

    Thanks
    Allen

  24. Chris J. Says:

    Allen: Have a look at http://msdn2.microsoft.com/en-us/library/ms998610.aspx#writingmngsinks_topic4
    That describes very well how to debug event sinks.

    Cheers,
    Chris

  25. Martin Says:

    Hi Chris, I am using MS SBS2003 with SP2 on Microsoft Exchange 2003. I would like to ask you if there is no problem with using your products Greylist on MS Exchange 2003 with SP2?
    Super tool!
    Thanks,
    Martin

Leave a Reply

You must be logged in to post a comment.

Host your project

Write for Grynx:

Do you have what it takes? If you're the right person then email us.

Archives:

Support Grynx:

Help us continue our work with a donation

Website promotion SEO Managed Advertising

5 Most popular articles:

Google

Categories:

Do it yourself - DIY
Our projects collection

19 queries. 0.213 seconds

Home