At 12:43 PM +0100 2/18/09, GrayHat wrote: > > But with this delaying, you will produce many >> open connections and much more load on ASSP >> and your MTA. > >uhm... on a second thought.. the delay isn't needed > >I mean... > >* ASSP receives a connection request > >* The connection is accepted > >* ASSP, before proxying the connection to the local > mailserver, checks if the external host already sent > something; if so, the connection is dropped > >* optionally the same check may be applied to the > MAIL FROM/RCPT TO/DATA commands; if the > remote host doesn't wait for the server response > then it's considered an "early talker" and the > connection is dropped > >* in either case, early talkers connecting/retrying too > often may then be penalized using the PB > >Also, implementing the "early talker" check inside the >same function performing the HELO check may ease >adding such a function to ASSP, and limiting the check >to the HELO phase should possibly ease the coding >of such a function
But to get to this state it had to pass DNSbl's and greylisting - something that a malformed bot is not likely to do IMHO. Tom ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
