Re: [courier-users] Question about SMTP RBL code

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.

--=_mimegpg-commodore.email-scan.com-4855-1112723398-0001
Content-Type: text/plain; format=flowed; charset="US-ASCII"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Jay Lee writes:

> I have Courier configured to query the SBL-XBL list in order to block
> off some of the more flaggarant spammers. What I see in my logs is a
> lot of this:
>
> Apr 3 04:07:35 courier courieresmtpd: started,ip=[198.172.95.91]
> Apr 3 04:07:43 courier courieresmtpd:
> error,relay=198.172.95.91,from=<FactoryDirectRewar ds@bocelclk.com>,to=<s_mtalladay@pbu.edu>:
> 511 http://www.spamhaus.org/SBL/sbl.lasso?query=SBL25510
> Apr 3 04:07:43 courier courieresmtpd:
> error,relay=198.172.95.91,msg="502 ESMTP command error",cmd: DATA
>
> Why does courieresmtpd wait until after mail from: and rcpt to: to do
> the rbl lookup? Couldn't it do it after the helo or even as soon as the
> smtp client starts the connection? According to my logs, courieresmtpd
> still isn't hanging up after the 511, spambots still try to send DATA.
> Is there a reason Courier doesn't forcefully drop the tcp connection
> after the 511?

If a spambot tries to attack you with multiple simultaneous connects, it is
to your advantage to keep each connection open as long as you can, so that
the spambot gets nailed by the limit on the maximum number of allowed
connections from the same IP address.


--=_mimegpg-commodore.email-scan.com-4855-1112723398-0001
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBCUs/Gx9p3GYHlUOIRAj37AJwLqkjOo3IR2pGUSJSb7rtztqs7jwCfY h4E
J052Gtfj6kmJRszN/aj6lIY=
=P8NZ
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-4855-1112723398-0001--


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users