[SA-exim] Teergrubing (stalling SMTP sessions )

Robert Strickler Robert.Strickler at us.net56.net
Sat, 13 Jul 2002 15:01:57 -0500


I should have synopsized the links for you to establish my point better.
There is just something about kicking a spammer in the ankles like that that
tickles me to no end, but I don't want to abuse legitimate mail caught in
the web too badly.

-----Original Message-----
From: Marc MERLIN [mailto:marc@merlins.org] 
Sent: Saturday, July 13, 2002 2:47 PM
To: Robert Strickler
Cc: 'sa-exim@lists.merlins.org'
Subject: Re: [SA-exim] Teergrubing (stalling SMTP sessions )


On Sat, Jul 13, 2002 at 02:50:37PM -0500, Robert Strickler wrote:
> ># This is done by never acknowledging DATA from the sender. # Note 
> >that this is against what RFCs state
> 
> Sending the continuation mess gage as noted in the Teergrubing web 
> pages would follow the RFC and would be nicer on false positives as 
> they should actually get the reject. Of course the load shedding logic 
> isn't there. I

Actually they can get the reject, you can sit 4mn and then send the reject.

Now, I re-read the FAQ you pointed to, and I see what you mean. Instead of
sitting 4mn and sending 45x message, I could: 1 wait 1mn 2 print "450-
message is spam, please wait for more output 3 goto 1

That definitely sound like an option I could add.
(I'll have to see how exim and local_scan react to the other side eventually
dropping the connection)

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" -
A.S.R. Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet
cooking
Home page: http://marc.merlins.org/   |   Finger marc_f@merlins.org for PGP
key