[Mimedefang] Pre-greeting traffic.

[G.W. Haywood]

Hi there,

My mail system automatically firewalls spam sources.  Depending on a
variety of factors, the block is either for a few hours or indefinite.

At the moment about half of the spam sources I see send pre-greeting
traffic (I'm using sendmail's greet_pause feature), but blocking on
that basis alone does give false positives, which I'd like to avoid.

I'm thinking along the lines of setting a 'pre-greeting traffic flag'
which could be used by Mimedefang in conjunction with other possible
spam indicators, and so I can do some staistics.

Another approach might be to examine the pre-greeting traffic itself,
although at this stage I have no idea what I might find in there.

Not wanting to re-invent old wheels (and shamlessly trying to avoid
doing work I don't have to do:) has anyone done these things already?

73,
Ged.