Re: another spamd log question

2008-03-21 Thread Jose Fragoso
Hi, I forgot to say that I am runnning OpenBSD 4.2 and spamd in greylisting mode and all default parameters (-G). My understanding is that if an IP address, after 4 hours of the initial greylist entry, has not been whitelisted yet, then it was a spammer who gave up because of the greylisting

another spamd log question

2008-03-20 Thread Jose Fragoso
Hi, Let us say I run a script which analyses the spamd log file saved more than 4 hours ago. Can I assume that the messages of the type: ...: ipaddress1: disconnected after X seconds. that do not specify a list and for which ipaddress1 is not whitelisted at the momentare spams caught by the

Spamd log question

2006-05-31 Thread Mike Spenard
I can't seem to find an explanation for this in the man pages (excuse my blindness if it is stated), but what does the '(17/16)' indicate in log entries such as this.. Jun 1 00:01:33 guardian spamd[9554]: 209.59.102.252: connected (17/16) Mike

Re: Spamd log question

2006-05-31 Thread Darrin Chandler
On Wed, May 31, 2006 at 10:31:18PM -0400, Mike Spenard wrote: I can't seem to find an explanation for this in the man pages (excuse my blindness if it is stated), but what does the '(17/16)' indicate in log entries such as this.. Jun 1 00:01:33 guardian spamd[9554]: 209.59.102.252:

Re: Spamd log question

2006-05-31 Thread Mike Spenard
What would the remainder be then if 16 out of 17 are black. Is the remaining 1 a greylist connection? Darrin Chandler wrote: On Wed, May 31, 2006 at 10:31:18PM -0400, Mike Spenard wrote: I can't seem to find an explanation for this in the man pages (excuse my blindness if it is stated),

Re: Spamd log question

2006-05-31 Thread Darrin Chandler
On Wed, May 31, 2006 at 10:56:40PM -0400, Mike Spenard wrote: What would the remainder be then if 16 out of 17 are black. Is the remaining 1 a greylist connection? Yes, if I'm right (and I think I am.) Grep the logs for 'connected ' and the numbers should make sense. You should see something