Peter N. M. Hansteen wrote: > Renaud Allard <[EMAIL PROTECTED]> writes: > >> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to >> the IP >> of the sender when it hits the greytrap IP. I don't feel this is wanted >> behavior. Has anymone any idea of why it is doing so? > > ACK packets are part of any two-way TCP/IP communication. Spamd's > mission with respect to blacklisted hosts is to waste spammers' time > by replying slowly. If you primarily want to blackhole rather than > greylist and tarpit, spamd is not the tool you are looking for. >
I know that ack packets are one part of the two-way TCP/IP communication. However sending ack packets with an originating IP of 127.0.0.1 to any non local (! 127.0.0.0/8) IP shouldn't happen, as they will never get back to (or at least be accepted by) the sender. So in my mind it is not normal behaviour or it is some kind of bug.