[SA-exim] Question

[Justin F. Knotzke]

   I am now able to reproduce teergrube using exim -bh and I witnessed
the 451- "wait for more output". Rather cool.

   The question I have is teergrube assumes that the spammer will
actually wait for the final 250 after a <CR><LF>. <CR><LF> is sent.

   Do they always?

   Could they not simply issue the <CR><LF>.<CR><LF> and then cut the
connection?

   J

-- 
Justin F. Knotzke
jknotzke at shampoo.ca
http://www.shampoo.ca