Re: [Sqlgrey-users] sqlstats need explanation

[Len C. <lc...@Go...>]

---------- Original Message ----------------------------------
From: Lionel Bouton <lio...@bo...>
Date:  Mon, 01 Jun 2009 19:38:38 +0200

>Len Conrad a écrit, le 06/01/2009 05:49 PM :
>> /usr/local/bin/sqlgrey-stats.sh
>>
>> GREY NEW:          70491
>> GREY EARLY RECON:  790
>> GREY RECON OK:     954
>> GREY DOMAWL:       7805
>> GREY FROM AWL:     795
>> WHITELIST:         191
>> SPAM:              33515
>> SMTPD GREYLISTED:  4015
>>
>> ... for about 11 hours Monday morning.
>>   
>
>I don't know sqlgrey-stats.sh so I'm not sure exactly what it should
>report. That said the categories seem to match SQLgrey's own log
>categories so I assume it makes sums of log lines matching these.
>
>> I find the smtpd "greylisted for 5 minutes" rejects to be extremely low compared to what I see with postgrey.  
>>
>> For 70K "new/never-seen" triplet, why aren't there 70K smtpd rejects?
>>   
>
>Why do you think there aren't ? Nothing above supports this claim: for
>each "grey new" and "grey early recon" line the server should return a
>temporary reject. If it doesn't, then it's a SMTP server configuration
>issue.
>

ok, found my misconfig:

changed these from "delay" to:

reject_first_attempt = immed
reject_early_reconnect = immed 


"greylisted" smtpd log lines are streaming up the screen now.

thanks
Len