Renaud Allard <renaud@llorien.org> writes:

quoted text
> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP
> of the sender when it hits the greytrap IP. I don't feel this is wanted
> behavior. Has anymone any idea of why it is doing so? 

ACK packets are part of any two-way TCP/IP communication.  Spamd's
mission with respect to blacklisted hosts is to waste spammers' time
by replying slowly.  If you primarily want to blackhole rather than
greylist and tarpit, spamd is not the tool you are looking for.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.