Greylisting to filter Spam and Viruses
Greylisting is a way to filter spam and viruses based on the premise that these MTAs (mail transfer agents) do not act like real MTAs do (like Exchange, Postfix, Sendmail, etc.). Greylisting works by rejecting any unknown triad (IP address, Dest address, Source address) for 5 minutes, with the assumption that a valid MTA will then try to resend again in 5 minutes, but a virus or spam won’t.
Postgrey is a greylisting spam/virus filter for postfix that works almost 95% (spamassassin picks up the rest).
Although greylisting is not a new concept, I just implemented it and it is working better than expected.
If you have any experience with this or alternative methods like statistical analysis, post a comment below.