On Wed, May 7, 2008 at 5:44 PM, John Hardin <[EMAIL PROTECTED]> wrote:

> On Wed, 7 May 2008, Aaron Wolfe wrote:
>
>  If you just want IPs, maybe instead of running an SMTP service that 450s,
> > you would want to use a packet filter like iptables instead.  You could get
> > the IPs simply by what packets you saw come in to port 25 and noone would
> > have to worry you were stealing their mail.
> >
>
> (1) Mark is trying to collect data on how the remote MTA behaves when
> presented with a 451 tmpfail result. A firewall rule can't do that.
>

>From his message: "I'm not interested in the content of the message or
anything other than catching the IP addresses of virus infected spam bots.
That's all I want to do."


>
> (2) If someone doesn't trust him when he says "I won't accept or read your
> mail", why will they trust him if he says "I have it firewalled off"?
>

Because you can very easily check for yourself to see that this is true.

-Aaron


> --
>  John Hardin KA7OHZ                    
> http://www.impsec.org/~jhardin/<http://www.impsec.org/%7Ejhardin/>
>  [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
>  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>  Where We Want You To Go Today 07/05/07: Microsoft patents in-OS
>  adware architecture incorporating spyware, profiling, competitor
>  suppression and delivery confirmation (U.S. Patent #20070157227)
> -----------------------------------------------------------------------
>  Tomorrow: the 63rd anniversary of VE day
>

Reply via email to