"Tarpitting" is used to refer to any of several things, e.g.,
  
http://www.merakmailserver.com/Knowledgebase/Merak_Mail_Server/Security/Tarpitting.asp

  http://www.palomine.net/qmail/tarpit.html

We have just added the latter, not the former.

I am not sure how effective either of these strategies is in a world dominated 
by MS-Windows spambots.  The only resources really being tied up are the SMTP 
server's own sockets.  Spammers don't care about resources being tied up on the 
millions of Microsoft-provided spam machines.

We probably should add a comment to warn admins who miss the point that it is 
their own sockets that will be tied up for the duration of the tarpitted 
session.  At such point as we eliminate the thread-per-socket requirement by 
adopting NIO (perhaps via MINA), this may be more practical, but I'm not sure 
how well MINA would support this notion.

I've a totally separate concern about some of the recent modifications in 
general, but I'll raise that separately.

        --- Noel


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to