On Thu, Oct 15, 2009 at 09:05:17PM -0400, Wietse Venema wrote: > Postscreen's greetpause is only the first step in a sequence of > barriers that I expect will be needed. Adding greylisting support > would be a next step. Adding greylist support to a kernel-based > implementation looks unattractive.
The kernel can be a good place to implement TCP connection concurrency, rate-limit and bandwidth cap controls. The "sensor" logic to determine which IPs are subject to which controls should be in "user-land". -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.