On Wed, Aug 13, 2025 at 03:41:26PM -0400, John Levine via mailop wrote: > It appears that Anthony Howe via mailop <ach...@snert.com> said: > >For myself I've been happy with greylisting for years, though a more > >practical > >grey list time I use is 15 minutes, because when it is a real RCPT long > >delays > >can be annoying. > > I've been greylisting forever, but I've recently switched to early talker, It > delays the initial greeting to unknown senders, hangs up if they talk before I > do, then add to a whitelist so I don't delay them again. Five seconds is > plenty, > if they talk early they do it immediately.
This sounds similar to spamd(8)'s default behavior for never seen before contacts, which is to stutter (again the default of one byte per second) for ten seconds, then proceed to add a GREY entry. What we've seen is that the vast majority of never before seen contacts drop their connection within that stuttering period, usually within the first three seconds or so. I have a couple of illustrative graphs in the https://nxdomain.no/~peter/effective_spam_and_malware_countermeasures.html piece about that - search for "connection lenght" and you'll find them. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds. _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
