At 07:27 24-04-2008, Johnson, S wrote:
After months of doing a great job, I started to get spam back into
my system again.
Apr 23 16:26:06 mail sqlgrey: grey: new: 82.67.64.191(82.67.64.191),
[EMAIL PROTECTED] -> <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]
Apr 23 16:26:06 mail postfix/smtpd[23130]: NOQUEUE: reject: RCPT
from mut38-1-82-67-64-191.fbx.proxad.net[82.67.64.191]: 450 4.7.1
<[EMAIL PROTECTED]>: Sender address rejected: Greylisted for 5
minutes; from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
proto=SMTP helo=<wzbkw.proxad.net>
(waited exactly 5 minutes to retry connection)
Apr 23 16:31:10 mail sqlgrey: grey: reconnect ok:
82.67.64.191(82.67.64.191), [EMAIL PROTECTED] ->
[EMAIL PROTECTED] (00:05:04)
It's trivial for malware engines to retry. There isn't any queueing,
as a standard MTA does, being done. This has been happening since
some time. Greylisting only fails if you rely on it to stop spam.
Regards,
-sm
