Peter N. M. Hansteen wrote:
> Renaud Allard <[EMAIL PROTECTED]> writes:
> 
>> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to 
>> the IP
>> of the sender when it hits the greytrap IP. I don't feel this is wanted
>> behavior. Has anymone any idea of why it is doing so? 
> 
> ACK packets are part of any two-way TCP/IP communication.  Spamd's
> mission with respect to blacklisted hosts is to waste spammers' time
> by replying slowly.  If you primarily want to blackhole rather than
> greylist and tarpit, spamd is not the tool you are looking for.
> 

I know that ack packets are one part of the two-way TCP/IP communication.
However sending ack packets with an originating IP of 127.0.0.1 to any non local
(! 127.0.0.0/8) IP shouldn't happen, as they will never get back to (or at least
be accepted by) the sender. So in my mind it is not normal behaviour or it is
some kind of bug.

Reply via email to