Peter N. M. Hansteen wrote:
quoted text
> Renaud Allard <renaud@llorien.org> writes:
> 
>> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP
>> of the sender when it hits the greytrap IP. I don't feel this is wanted
>> behavior. Has anymone any idea of why it is doing so? 
> 
> ACK packets are part of any two-way TCP/IP communication.  Spamd's
> mission with respect to blacklisted hosts is to waste spammers' time
> by replying slowly.  If you primarily want to blackhole rather than
> greylist and tarpit, spamd is not the tool you are looking for.
> 

I know that ack packets are one part of the two-way TCP/IP communication.
However sending ack packets with an originating IP of 127.0.0.1 to any non local
(! 127.0.0.0/8) IP shouldn't happen, as they will never get back to (or at least
be accepted by) the sender. So in my mind it is not normal behaviour or it is
some kind of bug.