[Greylist-users] How do you know when you are ready?

[Tom Haapanen]

On 2004-02-25 20:10, Tom Haapanen wrote:

> Really, the data content of the database is the big reason.  Yes, it's 
> possible to do all the reporting on your own, but if you have some 
> familiarity with MySQL, it's easy to do ad hoc queries and there is a 
> lot of added value to the database.  [...]


On this topic, I would love a little bit more data in the database -- 
namely a message-level table that would enable me to do more reporting.  
Would like to have a second table that would record
- relay_ip
- mail_from
- rcpt_to
- tempfail? (0 or 1)
- current blocked_count (1 on first attempt)
- current passed_count (1 on first success)
- time from create_time (seconds)

This would enable analysis of spam patterns, spam and legitimate retry 
patterns, and general mail traffic analysis -- with potential for 
further future enhancement of greylisting techniques.

Yes, all this is possible by writing scripts to analyze the log files, 
but I would rather not start messing with logs that were not meant for that.

Evan, I would be happy to enhance relaydelay.pl to do this if you are 
willing to incorporate the code into the main codeline.  Please let me 
know whether (1) this seems like a reasonable idea, or whether (2) 
something similar is already in the works.

Tom