Re: Overeager pipelining detector plugin

2003-03-13 Thread Ask Bjoern Hansen
On Thu, 13 Mar 2003, Devin Carraway wrote: [...] > This is only lightly tested, but AFAIK it should be safe in principle. I'd like to hear how it works over a few weeks or so. I fear that some "real" SMTP clients send the HELO as soon as they are connected. - ask -- ask bjoern hansen, http:

Re: HELO hook and check plugin

2003-03-13 Thread Ask Bjoern Hansen
On Thu, 13 Mar 2003, Devin Carraway wrote: [...] > Here's a patch to SMTP.pm to add hooks for HELO and EHLO, and a plugin > to use them. Nice idea, thanks. I'll put it in the next release with the recent stuff Matt has sent. - ask ps. very funny DENY message. :^) -- ask bjoern hansen, http

HELO hook and check plugin

2003-03-13 Thread Devin Carraway
Speaking of direct-to-MX spam, both AOL and Yahoo are large companies with whole walls-full of servers devoted to mail delivery. None of them announce themselves with "HELO yahoo.com" or "HELO aol.com." Spammers certainly do, though. Here's a patch to SMTP.pm to add hooks for HELO and EHLO, and

Overeager pipelining detector plugin

2003-03-13 Thread Devin Carraway
I've been noticing an escalation over the past several months in direct-to-MX spam from agents using total pipelining -- that is, blowing everything from HELO to . into their end of the socket as soon as they finish connecting, without waiting for any server responses. A side effect of this is tha