Renaud Allard <[EMAIL PROTECTED]> writes: > I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the > IP > of the sender when it hits the greytrap IP. I don't feel this is wanted > behavior. Has anymone any idea of why it is doing so?
ACK packets are part of any two-way TCP/IP communication. Spamd's mission with respect to blacklisted hosts is to waste spammers' time by replying slowly. If you primarily want to blackhole rather than greylist and tarpit, spamd is not the tool you are looking for. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.