[Mimedefang] Pre-greeting traffic.
G.W. Haywood
ged at jubileegroup.co.uk
Wed Apr 4 14:31:55 EDT 2007
Hi there,
My mail system automatically firewalls spam sources. Depending on a
variety of factors, the block is either for a few hours or indefinite.
At the moment about half of the spam sources I see send pre-greeting
traffic (I'm using sendmail's greet_pause feature), but blocking on
that basis alone does give false positives, which I'd like to avoid.
I'm thinking along the lines of setting a 'pre-greeting traffic flag'
which could be used by Mimedefang in conjunction with other possible
spam indicators, and so I can do some staistics.
Another approach might be to examine the pre-greeting traffic itself,
although at this stage I have no idea what I might find in there.
Not wanting to re-invent old wheels (and shamlessly trying to avoid
doing work I don't have to do:) has anyone done these things already?
73,
Ged.
More information about the MIMEDefang
mailing list