On Feb 8, 2008, at 11:37 AM, Leonardo Rodrigues Magalhães wrote: > Lately i have seen a LOT of SPAM resending with almost exact 10 > minutes of difference. For example: > > Feb 3 07:51:06 hermes policyd: rcpt=876, greylist=new, > host=117.6.120.63 (unknown), [EMAIL PROTECTED], [EMAIL PROTECTED] > , size=33567
snip > Feb 2 11:06:40 hermes policyd: rcpt=1121, greylist=update, > host=121.174.102.112 (unknown), [EMAIL PROTECTED], [EMAIL PROTECTED] > , size=0 > > > just to quote some few examples of 'almost exact 10 minutes' > resending connections. > > Have you seen, greylist users, experiencing these spammers > retrying as well ?? Seems it's time to raise the default > TRIPLET_TIME to 15m ..... There is a common theme there, you are accepting mail from servers without FQDNs, hence the 'unknown'. Fix your server, and they won't bother you again. Jim ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ policyd-users mailing list policyd-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/policyd-users
