Re: Is predictable spam filtering a vulnerability? (silently dropping messages)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>> A 5xx failure code is a lot more friendly than actually generating a
>> DSN.
> Well, you're causing the sending/relaying host to generate the DSN.

Only if the sending host is running a real MTA.  If it's ratware
talking to you, it won't do anything of the sort.  _That_ is the real
gain of an SMTP-layer rejection over accept-and-bounce: it doesn't
generate DSNs when talking to ratware.

> Quite possibly back to some sod who has been joe-jobbed.

But in that respect it's no worse than generating a DSN yourself.
Better sometimes and no worse the other times - sounds like a win.

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@xxxxxxxxxxxxxxxxxxxxxx
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux