On Tue, 10 Mar 1998, Rik Kabel wrote:
Now, if you could find some other signature of RFMS that you
could filter on, that sounds like a winner.
As you suggest, there are additional signatures which enables the type of
filtering which Andrew requested. Those are that:
The pity is that many of us are doing this after the message has been accepted
by our ISP. It would much nicer if it could be easily handled by sendmail.
(Perhaps it can -- I don't do sendmail.)
Exim has many features that detect this sort of attack and stop the
damm thing by rejecting the recipients so it gives up, rejecting
all commands after the helo sequence, rejectingthe helo sequence, or
even the initial connection because of the DNS entry for the host !
-Sean