On 2015-10-13 Tue 18:55 PM |, Stuart Henderson wrote:
> 
> It's totally possible. Blacklist mode by default returns a temporary failure
> so a standard MTA would keep trying, whereas with greylisting or no spamd
> it would stop after the mail is accepted. And in stuttering mode you send
> one character per packet so there's one TCP header for each character.
> 

Every hundred times the zombie retries.

Rules something like these might reduce the traffic:

table <spamd-white> persist
table <spamd-trapped> persist
table <your-blacklist> persist file "/etc/pf/tables/your-blacklist.txt"

block in log from <spamd-trapped>
block in log from <your-blacklist>

Reply via email to