Steffen Nurpmeso:
> The _only_ thing that must be taken into account, and i would wish
> postfix would offer a solution for this, is that the *_error_limit
> configuration parameters kick in. I have drastically low numbers
> to reduce log noise for all these nonsense connections, but with
> graylisting each DEFER_IF_PERMIT (or DEFER etc) counts as one
> error. So if you have a message from a non-whitelisted sender
> that ends up with two or three valid recipients on the host, it
> counts as two or three errors.
> So like s-postgray will impose limit-delay sleeps per RCPT TO:,
> postfix will count errors per RCPT TO.
> This is no good for graylisting, better would be a special
> access(5) entry which simply "remembers an error once".
Something like WARN_IF_REJECT (but with a different name and effect)
that you can specify before REJECT, DEFER, etc. in an access map
or policy server response?
To my astonishment, Postfix does not send its own version in a
policy server request. That should probably be fixed.
Wietse
