Hi there, On Fri, 18 Oct 2019, J.R. via clamav-users wrote:
... most email servers don't close the connection automatically until the client side sends a quit (which many spammers don't), it then falls back to the timeout setting to close ...
Time was when you could rely on that, but even some of the big players get it round their necks. I frequently see delays between 20 and 300 seconds before the QUIT command after EOM. Amazon for example is one big offender. And with almost 98% of the mail I see now being spam it would be asking for denial of service to rely on clients closing their connections. Unless I'm testing clamd, the moment they trip over one of the wires (and there are *lots* of wires), I'll drop the connection and throw another IP into the tarpit. -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
