Re: [exim] Greylisting algorithms after end of DATA

On Mon, 2007-01-22 at 07:53 +0100, Renaud Allard wrote:
> Some hosts acts as gateways with NAT and mail relaying. The mail relay
> will probably retry each time. But infected windows zombies behind the
> gateway won't all the time. I find it pretty useful to greylist for each
> triplet (IP/from/to) as it has proven to block zombies behind gateways,
> and not the legitimate mails.

Hm, that's an interesting point. I should probably use (IP,HELO) instead
of just the IP. Using from/to addresses wouldn't be my choice.

--
dwmw2