On Fri, 2006-06-23 at 19:35 +0300, Odhiambo G. Washington wrote:
> I agree with you. Now tell me how much overheard this would add, if I
> knew _all_ the IPs that are geographically in Kenya (via GeoIP):
>
>
> check_connect:
> drop !hosts = cdb;/path/to/db/with/all_KE-IPs
> accept
>
>
> (or the reversing thereof, of this rule).
That depends on how rapidly the broken mail software that is attempting
to connect retires.
Dropping before the RCPT command will often cause spamware to
immediately retry the connection. Denying after the RCPT just makes the
software think it was a bad address and it moves on.
