Cormack, Ken wrote: > My greylisting is blocking these, but only after the DATA phase, after > expensive SA overhead.
??? Why is that? Surely you should do the greylisting test first, and if something is greylisted, don't even call SA. Just do action_tempfail. (That's what our CanIt products do.) I am seeing a lot of these. From today (edited log extracts: sender, subject): 11:43:58 [EMAIL PROTECTED], E.B.A.Y WORKERS NEEDED..FIND OUT M. 0. R. E. 12:13:55 [EMAIL PROTECTED], Get a ten time increase for your business literally overnight 12:24:48 [EMAIL PROTECTED], E.B.A.Y RESELLERS NEEDED . 12:28:16 [EMAIL PROTECTED], The Biggest Loser Club: How would you do? 12:34:39 [EMAIL PROTECTED], Re: Re: Re: 12:45:39 [EMAIL PROTECTED], Get a ten time increase for your business literally overnight 13:18:12 [EMAIL PROTECTED], Free Bottle of Lipoplex with H.o.o.d.i.a- L o s e weight in 2 days!!! 13:45:32 [EMAIL PROTECTED], Re: Hi 14:15:02 [EMAIL PROTECTED], I WASN'T FIRED . . . EVEN THOUGH I FAILED. 15:00:16 [EMAIL PROTECTED], This voucher is worth over usd 2500. redeem yours t o d a y ! ! 15:15:00 [EMAIL PROTECTED], Any med for your girl to be happy! 15:15:54 [EMAIL PROTECTED], Need medicine? All here! 15:22:21 [EMAIL PROTECTED], Re: Hi 15:22:32 [EMAIL PROTECTED], Re: Hi 15:28:24 [EMAIL PROTECTED], Zealands 15:33:53 [EMAIL PROTECTED], R.E.F.I.N.A.N.C.E WHILE RATES HIT 40 YEARS Low!! 16:08:57 [EMAIL PROTECTED], The Biggest Loser Club: How would you do? 16:53:30 [EMAIL PROTECTED], how r u and greylisting seems to stop them. The two [EMAIL PROTECTED] senders were still greylisted, because the second one was for a different recipient than the first (same sending IP, though.) Regards, David. _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

