Highly agreed. I've seen this happen. Never ASSP fault, but routers, especialy PIX, and mobile users are highly prone to connection drops, time out, legit Idle.
Watching tcpdump on the server side of an iPhone is a good example, though I'm not very great at tcpdump reading and haven't found the easiest tools for post stream analysis on OS X. But I see SMTP timeout and retry often in my outbound mail queue. I know that's not related directly, but it illustrates it happens more than I think we suspect. It's a messy world of servers out there. Luckily many of these hosts will already passed ok in the past and seem to be in a "whitelist" of some form. However, email is a big pit of transient errors and as more mobile users roam around on junky connections I believe it to only get worse. PB is a good idea but it needs a coupler, something else to weigh in with it to reduce the chance of a false positive. So far, I'm not seeing any troubles I'm aware of because so much of this is SMTP AUTH based, which that type of user already can't be hurt under my configs. Good comment. Definitely worth looking into, probably a pain in the rear to test. -- Scott (Sent from a mobile device) On Dec 22, 2009, at 3:15 AM, Thomas Eckardt/eck <[email protected] > wrote: > I think penalizing because of connection idling (or timeout) is > possible > (V1 is doing it), but not such a good idea. There are too many other > possible (good in terms of the PB) reasons that could result in a idle > connection (local workload, firewall, ISP, router, remote workload, > too > havy line traffic ....) but only one bad reason (remote spamming > software). So it could happen, that assp will penalize good IP's in to > 'extrem black' within some minutes, if there appears any external > problem > or a problem with your local components or lines over some minutes. > > Thomas > > > > > "GrayHat" <[email protected]> > 22.12.2009 11:32 > Bitte antworten an > GrayHat <[email protected]>; Bitte antworten an > ASSP development mailing list <[email protected]> > > > An > <[email protected]> > Kopie > > Thema > [Assp-test] Penalty box question > > > > > > > > I was looking at the logs and found that in many cases > spambots after getting a reject remain connected to the > server until the connection is forcibly terminated by ASSP > due to timeout; now... > > Since this behaviour is quite frequently related to spambots > and/or to spamming servers, it may be a good idea using this > "feature" to recognize such senders and penalize them; what > I'm wondering is if the penaltybox also takes in account "idling" > along with the other message scoring points > > > --- > --- > --- > --------------------------------------------------------------------- > This SF.Net email is sponsored by the Verizon Developer Community > Take advantage of Verizon's best-in-class app development support > A streamlined, 14 day to market process makes app distribution fast > and > easy > Join now and get one step closer to millions of Verizon customers > http://p.sf.net/sfu/verizon-dev2dev > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, > legally > privileged and protected in law and are intended solely for the use > of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > --- > --- > --- > --------------------------------------------------------------------- > This SF.Net email is sponsored by the Verizon Developer Community > Take advantage of Verizon's best-in-class app development support > A streamlined, 14 day to market process makes app distribution fast > and easy > Join now and get one step closer to millions of Verizon customers > http://p.sf.net/sfu/verizon-dev2dev > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
