Milter-greylist

Ok - I used the wrong stats here.

What we really need to look for are the initial delay of an incoming message, which we get from:

# grep "Greylisting in action" mail | wc -l
1321

Then there are two possible subsequent events based upon that first rejection.

1) The email is re-sent, and it passes through with an added header indicating the delay.

2) Subsequent emails with the 3-tuple that matches will just sail through, these are the "autowhitelist" entries. Note that the ORIGINAL email is not an autowhitelist.

We can get a count of the initial email retry, plus the autowhitelist emails thus:

# egrep "X-Greylist: Delayed for|autowhitelisted" mail | wc -l
95

So - to answer my own question -- yes this is still a VERY valid technique.


------

I didn't look closely enough at the log data, the phrase "delayed for" occurs on every initial rejection, so its not surprising that those two counts were identical.