>The rate limit setting of 5. Is that low? Recommended?
there number would be related to your local volumes for legit MXs. use
this report for a full day:
awk '/smtpd.* connect from/{ print $8}' /var/log/maillog |\
sort -f | uniq -ic | sort -rf | less
Look at the connect 24-hour qty for the BigISP (aol, hotmail, yahoo, msm,
etc), divide by 48 to get their legit connects per 30 minutes. That should
be a sanity check.
the "anvil exceptions" param allows you to except MTAs that might have
legit reason to connect more than you allow with anvil. ie, list servers
that send one msg/session, rather than multiple msgs/session. Also, list
servers that send per-user msgs (unique per user) rather than same msg to
multiple users.
Len