Mailing List SIMS@mail.stalker.com Message #6418
From: Technical Support, Stalker Labs <support@stalker.com>
Subject: Re: (not so) Obvious spam address
Date: Thu, 06 Jul 2000 20:39:19 +0400
To: SIMS Discussions <SIMS@mail.stalker.com>
X-Mailer: CommuniGate 3.2.2b
Hello,

On Thu, Jul 6, 2000, 15:31:38 GMT
  Cerebus D Aardvark, <kreme@kreme.com> wrote:

>On 7/6/00 at 08:51 -0500, Dave Martin said:
>>It might be nice if SIMS could do some "Received" backtracking, but that
>>would require accepting the connection to read headers, and would add to
>>overhead as each IP address/hostname in the Received path (part of which
>>may be forged, too) was DNS/revDNS inspected for possible blacklist or
>>RBL matches. I know when our university "forced" a secondary MX on us,
>>tons of spam which SIMS would have stopped came through, because the
>>secondary was a "trusted" host, and it was accepting the spam
>>unconditionally. If SIMS could have checked the received's (maybe even
>>just the previous one), and do checks on that, a lot of stuff would have
>>been blocked.
>
>It would be _so_ nice to have SIMS check the previous path when mail
>comes in from the secondary.  However, you don't want mail from your
>secondary being rejected, so SIMS would need to handle it differently.
>
>Maybe mail coming from a client IP for local delivery that fails the
>spam test could be deposited elsewhere?
>
>maybe a setting to ask sims to perform blacklist checks two levels
>back to circumvent the unknown open relay?

I thought of running RBL/LBL agains IPs contained in the last Received headers, but that would also pose a demand for a protocol for LBL/TBL replication between primary and secondary servers. (LBL stands for Local BL, TBL - Temporary BL).

>All options, of coruse.


Best regards,
Dmitry Akindinov

=======================================================================
When answering to letters sent to you by the tech.support staff, make
sure the original message you have received is included into your reply.
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster