Spamd and the openbsd mailing lists...

[Jeff Ross <jross_(_at_)_openvistas_(_dot_)_net>]

Hi,

Last night I turned spamd and greylisting on mail.openvistas.net.

jross_(_at_)_heinlein:/home/jross $ ps -wwwaux | grep [s]pamd
_spamd    6938  0.0  0.4  8492   556 ??  Ss     2:17AM    0:12.30 spamd: 
(pf <spamd-white> update) (spamd)
_spamd   23527  0.0  3.0  8492  3900 ??  S      2:17AM    0:24.64 
/usr/libexec/spamd -v -p 8024 -G 4:12:1512 -g
_spamd   20711  0.0  0.4  8492   516 ??  S      2:17AM    0:06.75 spamd: 
(/var/db/spamd update) (spamd)

(I had to run spamd on port 8024 because I have another mail daemon 
running on port 8025.)

The effect has been dramatic!  Right now I've got 82 mail servers as 
WHITE and 4,354 as GREY.

Unfortunately, the mail server that runs the openbsd.org mailing lists 
is still in the GREY category.  Worse, it appears that it will stay that 
way unless I manually intervene:

spamdb | grep openbsd | cut -f 1,2,5,6,7,8,9 -d \|

GREY|128.138.207.242|1100859446|1100902646|1100902646|1|0
GREY|128.138.207.242|1100861305|1100904505|1100904505|1|0
GREY|128.138.207.242|1100863207|1100906407|1100906407|1|0
GREY|128.138.207.242|1100865097|1100908297|1100908297|1|0
GREY|128.138.207.242|1100866964|1100910164|1100910164|1|0
GREY|128.138.207.242|1100869256|1100912456|1100912456|1|0
GREY|128.138.207.242|1100871109|1100914309|1100914309|1|0
GREY|128.138.207.242|1100876821|1100920021|1100920021|1|0
GREY|128.138.207.242|1100874924|1100918124|1100918124|1|0
GREY|128.138.207.242|1100878851|1100922051|1100922051|1|0
GREY|128.138.207.242|1100880890|1100924090|1100924090|1|0
GREY|128.138.207.242|1100882962|1100926162|1100926162|1|0
GREY|128.138.207.242|1100884820|1100928020|1100928020|1|0
GREY|128.138.207.242|1100886630|1100929830|1100929830|1|0
GREY|128.138.207.242|1100888461|1100931661|1100931661|1|0
GREY|128.138.207.242|1100890333|1100933533|1100933533|1|0
GREY|128.138.207.242|1100893998|1100937198|1100937198|1|0
GREY|128.138.207.242|1100895826|1100939026|1100939026|1|0
GREY|128.138.207.242|1100897892|1100941092|1100941092|1|0
GREY|128.138.207.242|1100899902|1100943102|1100943102|1|0
GREY|128.138.207.242|1100873085|1100916285|1100916285|1|0
GREY|128.138.207.242|1100892171|1100935371|1100935371|1|0

For those of you that may not be familiar with the output of spamdb, 
each entry above shows that the mail server made just one attempt to 
deliver a message to me.  Greylisting requires that it make 2 attempts 
in a set period of time before spamd moves the entry from GREY to WHITE 
and it then takes one more attempt to actually deliver the first e-mail.

I know that I can add 128.138.207.242 to the database manually.  But 
shouldn't the mail server at 128.138.207.242 be re-trying to deliver 
mail?  Is this a configuration choice?

Help, I'm missing my daily fix of RTFM (I did, I really did!) and STFA 
(I did that, too, I did, I really did) and even STFU (Okay, I will! 
Really!)

:-)

Jeff Ross

P.S.  Reply-to is set--it's the only way I'll see any replies ;-)