[SA-exim] Identifying repeat offenders using the tuplets

[Matt Bostock]

Thanks Marc!

Matt

On Mon, 25 Jun 2007 15:31:04 -0700, Marc MERLIN <marc at merlins.org> wrote:
> On Sat, Jun 23, 2007 at 06:22:36PM +0000, Matt Bostock wrote:
>> Hello all,
>>
>> I've been using SA-Exim for a few months and it has been BRILLIANT. I
> just recently increased the score weightings for the Razor2 and DCC
> plugins for SA, and combined with SA-Exim and effect has been phenomenal.
>>
>> I want to parse the tuplets dir to search for 'repeat offenders', i.e.
> IP addresses that send high-scoring spam to multiple recipients. What do I
> need to look for in the tuplets files? For example, what does the 'Query
> Count' represent?
> 
> You can look at the perl module, it's pretty simple really.
> 
> Query Count shows how many times that greylist combo made a connection
> since
> the file was created on disk.
> 
> Marc
> --
> "A mouse is a device used to point at the xterm you want to type in"