On Tue, 28 Dec 2004 03:20:59 -0800, Chairman of the Bored <[EMAIL PROTECTED]> wrote: > now the question is, what is it doing? > the program just stuffs the ip in memory and counts it down for an hour? or? > i.e. 198.172.80.55 hit the spamtrap. so what's it rejecting it with? > (it didn't add it to anything i can see?
It's a memory list of the ip address and the time of the hit. As it scans the list checking for the current one, it expires any that have been there longer than the timeout. The remote connection gets the standard 550 unknown user. For subsequent hits, it acts like a normal blacklisted ip. There's no way to see whats in the list short of parsing the reject log. > (and what's the difference between a 550 and a 554?) there's no real difference. as long as the response is 5xx, its an unrecoverable failure. The last 2 digits are supposed to give more details on the reason. From the occurances in the source, 550 is used when it is caused by "rcpt to" (eg unknown user, spamtrap) and 554 is used when its something to do with the connecting ip (rbl, blacklist). klint +---------------------------------------+-----------------+ : Klint Gore : "Non rhyming : : EMail : [EMAIL PROTECTED] : slang - the : : Snail : A.B.R.I. : possibilities : : Mail University of New England : are useless" : : Armidale NSW 2351 Australia : L.J.J. : : Fax : +61 2 6772 5376 : : +---------------------------------------+-----------------+ This is the discussion list for the IMS Free email server software. To unsubscribe send mailto:[EMAIL PROTECTED] Delivered by Rockliffe MailSite http://www.rockliffe.com/mailsite Rock Solid Software (tm)
