[ot] Re: Stupid anti-spam testings...

From: Matt Bernstein (matt@theBachChoir.org.uk)
Date: Mon Sep 02 2002 - 18:55:53 EST


At 02:32 +0300 Matti Aarnio wrote:

>On Mon, Sep 02, 2002 at 04:28:37PM -0600, Andreas Dilger wrote:
>...
>> Do you know if this is one of the default checks from spamassassin?
>
> No idea. I have seen these coming from Exim 4.10, Exim-something,
> some sendmail milter (whatever that is), etc..
>
> Apparently the idea (which I have thought of long ago, and rejected
> as incomplete) has caught, and has multiple implementations...

I only speak (and even then not officially) for Exim's implementation,
which is "verify = sender/callout" in Exim 4. I will check to see what
caches may or may not apply. (I think Exim might not cache this, in which
case I'll try to get this caching onto the wish list.)

Anyway I think this kind of paranoia is just silly. It's trivial to forge
a valid sender address, so why bother checking anything other than a
syntactically valid domain name?

> - usw-sf-list1.sourceforge.net use probably their own code
> usw-sf-fw2.sourceforge.net too... possibly more systems there..

These may well be Exim.

> - quetz.demon.co.uk tests from Exim 4.10
> - somebody.symons.net tests from Exim 3.35
>
> Right now something like 5-7 different systems are doing it.
> Try to imagine when all 3500 targets do it... BRRRRR...
> (Sure, VGER can handle it, no problem, but it is that much
> wasted cycles, and network traffic...)

In Exim's case the network traffic will be minimal:

EHLO host.name
MAIL FROM:<>
RCPT TO:<sender@for.verify>
RSET

..is about as much as you'll get. The wasted cycles will be more
important.

Sorry for the noise on the list..

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Sep 07 2002 - 22:00:16 EST