Index: [Article Count Order] [Thread]

Date:  Thu, 21 Dec 2006 12:03:25 -0500
From:  "Paul Aviles" <paul.aviles (at mark) nickelnetworks.com>
Subject:  [coba-e:08306] Re: AW:  Re: greet_pause
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <200612211704.kBLH47jc015980 (at mark) srv1.nickelnetworks.com>
In-Reply-To:  <474701c72483$264dff30$6700a8c0@OfficeKen>
X-Mail-Count: 08306

Ken, the greet_pause goes into effect before the BL does so what you are
seeing is the end results. Yesterday we increased one of the servers to 5
seconds and the count of greet rejects did not increase from the previous
day, we had it at 1000 or 1 sec before. Anyone else with different results
adjusting the value?

Paul Aviles
Nickel Networks

-----Original Message-----
From: Ken Marcus - Precision Web Hosting, Inc.
[mailto:kenmarcus (at mark) precisionweb.net] 
Sent: Wednesday, December 20, 2006 5:07 PM
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:08295] Re: AW: Re: greet_pause

I am actually seeing very few log entries when I check with:
cat /var/log/maillog | grep  greet

It just shows 16 entries an 8 megs of maillog.

When I check the blacklist hits
cat /var/log/maillog | grep "Spam blocked" -c 13308 I see a lot more blocked
by that method.

Dec 20 14:03:47 raq83 sendmail[17423]: ruleset=check_relay,
arg1=host-65-125-48-162.clearviewcatv.net, arg2=65.125.48.162,
relay=host-65-125-48-162.clearviewcatv.net [65.125.48.162], reject=553 5.3.0
Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip=65.125.48.162
Dec 20 14:03:48 raq83 sendmail[17424]: ruleset=check_relay,
arg1=200-161-198-180.dsl.telesp.net.br, arg2=200.161.198.180,
relay=200-161-198-180.dsl.telesp.net.br [200.161.198.180], reject=553 5.3.0
Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip=200.161.198.180
Dec 20 14:03:52 raq83 sendmail[17428]: ruleset=check_relay,
arg1=[83.243.88.211], arg2=83.243.88.211, relay=[83.243.88.211], reject=553
5.3.0 Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip=83.243.88.211
Dec 20 14:03:54 raq83 sendmail[17430]: ruleset=check_relay,
arg1=wsip-68-226-77-157.om.om.cox.net, arg2=68.226.77.157,
relay=wsip-68-226-77-157.om.om.cox.net [68.226.77.157], reject=553 5.3.0
Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip=68.226.77.157



Maybe the blacklists get most of it  before the greet_pause has a chance.



----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net