On Mon, 2007-01-22 at 07:53 +0100, Renaud Allard wrote: > Some hosts acts as gateways with NAT and mail relaying. The mail relay > will probably retry each time. But infected windows zombies behind the > gateway won't all the time. I find it pretty useful to greylist for each > triplet (IP/from/to) as it has proven to block zombies behind gateways, > and not the legitimate mails.
Hm, that's an interesting point. I should probably use (IP,HELO) instead of just the IP. Using from/to addresses wouldn't be my choice. -- dwmw2 -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
