Right first- I know what tarpitting is.
The type of tarpitting I will be using is the supression of error mesages - not tarpitting the initial session before the mailserver sends its welcome banner - I know the recommended time is 40-60 seconds.
However since I am supressing errors instead I would have thought that the tarpit time should be a lot less - like 10 seconds or so.
The organisation recievs appx 5,000 messages per day the majority of which is spam.
I want to make sure that address book harvesting attacks are very difficult but at the same time I dont want the server running out of RAM - it has 4GB
My concerns are resource usage on the server and causing problems with legitimate mail timing out because the server is taking too lond to respond.
Has anyone here used it before and what time did they have set?
what sort of resource usage? any problems?