Greylist

Definition

Temporary block/allow list requiring additional verification.

Technical Details

Greylisting is a method used in email filtering, anti-spam systems, and access control to temporarily reject or allow requests based on reputation or behavior. When a sender is greylisted, their request is initially denied, and the system records the timestamp and sender information. If the sender is legitimate, they will attempt to resend the request after a short delay, which the greylist recognizes and then allows through. This technique helps reduce spam by taking advantage of the fact that many spammers do not retry sending messages, while legitimate senders usually do.

Practical Usage

In practice, greylisting is implemented as part of an email server's filtering process. When a message is received from an unknown sender, the server checks if the sender's IP address is in the greylist. If it is not, the server temporarily rejects the message with a response indicating a temporary failure. The sender's mail server will then typically try to resend the message after a delay. This method is commonly used in conjunction with other filtering techniques to increase the effectiveness of spam prevention without significantly impacting legitimate email traffic.

Examples

• A corporate email server uses greylisting to mitigate spam by temporarily rejecting emails from unknown senders. If the sender retries after a few minutes, the email is accepted as legitimate.
• An online service employs greylisting for user account login attempts. If a user attempts to log in from an unrecognized device or location, the system may require additional verification steps before allowing access.
• A web application firewall (WAF) utilizes greylisting to manage incoming traffic, temporarily blocking requests from new IP addresses until they demonstrate legitimate behavior by sending multiple requests over time.

Related Terms