[SA-exim] Teergrubing (stalling SMTP sessions )

Marc MERLIN marc at merlins.org
Sat, 13 Jul 2002 12:46:33 -0700


On Sat, Jul 13, 2002 at 02:50:37PM -0500, Robert Strickler wrote:
> ># This is done by never acknowledging DATA from the sender.
> ># Note that this is against what RFCs state
> 
> Sending the continuation mess gage as noted in the Teergrubing web pages
> would follow the RFC and would be nicer on false positives as they should
> actually get the reject. Of course the load shedding logic isn't there. I

Actually they can get the reject, you can sit 4mn and then send the reject.

Now, I re-read the FAQ you pointed to, and I see what you mean. Instead of
sitting 4mn and sending 45x message, I could:
1 wait 1mn
2 print "450- message is spam, please wait for more output
3 goto 1

That definitely sound like an option I could add.
(I'll have to see how exim and local_scan react to the other side eventually
dropping the connection)

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f@merlins.org for PGP key