On Sat, 07 Aug 2004 17:53:35 +0100, Jeremy Harris wrote
I don't agree about spammers using stateless stacks. My experience
in running delays is that far more smtp connections a dropped during
such delays than offer data out-of-sequence.
Hmm. That hasn't been my experience for delays before the 220 banner; I
rarely see a connection drop at that point. It has been true of delays later
in the transaction, though -- for example, I delay 60 seconds every time the
sender gives me an invalid RCPT TO address. A fair number of connections drop
during that delay. Inspection of the logs shows they're usually from
dictionary spammers.