--On 21 June 2005 15:17 +0200, Heinrich Rebehn wrote:
Would it be possible to change this behaviour so that the
whitelisting is done as soon as the same sender/receiver pair is
seen again, ignoring the ip address? This could speed up things a bit.
If you do that, what IP address should you add to the whitelist?
Apart from the suggestions of masking the last octet of the IP address,
there are other ways to restrict things, such as only greylisting
certain senders (because it's just done by PF rules, there are many
options). Examples might include: senders using Windows OS, senders
with addresses on a DUL, or senders with addresses on some 'heavy'
blacklist (i.e. too many false-positives to use outright).
