... noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP ... of any two-way TCP/IP communication. Spamd's | > mission with respect to blacklisted hosts ... to blackhole rather than | > greylist and tarpit, spamd is not the tool you are ...

openbsd-misc - Paul de Weerd - Dec 10 2007 - 11:50

... noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP ... of any two-way TCP/IP communication. Spamd's > mission with respect to blacklisted hosts ... to blackhole rather than > greylist and tarpit, spamd is not the tool you are ...

openbsd-misc - Renaud Allard - Dec 10 2007 - 11:24

... noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP ... of any two-way TCP/IP communication. Spamd's mission with respect to blacklisted hosts ... on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected ...

openbsd-misc - Peter N. M. Hansteen - Dec 10 2007 - 10:42

... | Have you actually seen these packets live on the wire ? > > I re-read your original mail, and it ... told me he was blocking packets from 127.0.0.1 originating from ... to 127.0.0.1:8025, the port where spamd is ... 00:04:23:09:79:68 0800 113: 127.0.0.1 ...

openbsd-misc - Renaud Allard - Dec 10 2007 - 12:11

... : > However sending ack packets with an originating IP of 127.0.0.1 to any non local > (! 127.0.0.0/8) IP shouldn't happen, yYou're right, that ... bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected ...

openbsd-misc - Peter N. M. Hansteen - Dec 10 2007 - 11:47

... actually seen these packets live on the wire ? I re-read your original ... requests to 127.0.0.1:8025, the port where spamd is ... etc. *MUST* originate from | 127.0.0.1:8025 in this case. PF will take care of rewriting the packet | to the address the client ...

openbsd-misc - Paul de Weerd - Dec 10 2007 - 12:02