Carl R. Friend <[EMAIL PROTECTED]> wrote:
>   Does anyone here know how a zombie machine reacts to a 5xx reject?
> Since most spam now arrives via zombies, I'd think we'd want to be
> careful about possibly hosing some poor innocent's machine.  4xx-ing
> the messages (an old favourite of mine before the zombie technique)
> might cause all manner of grief (there's also teergrubing).

Most of them just drop the TCP connection, without even saying goodbye (no
QUIT).  How rude! In postfix logs it looks like this:

Jan 18 10:36:04 mx postfix/smtpd[18786]: reject: RCPT from unknown[64.191.76.56]: 554 
<[EMAIL PROTECTED]>: Recipient address rejected: Access denied; from=<[EMAIL 
PROTECTED]> to=<[EMAIL PROTECTED]>
Jan 18 10:36:09 mx postfix/smtpd[18786]: lost connection after RCPT from 
unknown[64.191.76.56]
Jan 18 10:36:09 mx postfix/smtpd[18786]: disconnect from unknown[64.191.76.56]

-- 
  Eric Sorenson - Systems / Network Administrator, MIS - Transmeta Corporation



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to