Klint Gore asked:
> Personally, I would much rather ISP's take a more active role in
> preventing junk going out rather than having to filter incoming. It's
> much easier to worry about my own users rather than have to deal with
> the rest of the world.
Yes, but most ISP's solution seems to be to prevent any use of mail outside
of their servers. That's hardly a solution that anyone here could get
behind!
Moreover, spammer ISP's aren't going to do that (obviously), and they will
continue to inject forged mail unless that activity is detectable by the
recipient. SPF is just one tool of many - spammers will find away around any
roadblock we can put in their way, so we need as many as possible.
> Anyway, how do people feel about adding to the RCP file (if it doesnt
> break smtpds)?
> Originating-IP: aaa.bbb.ccc.ddd
>
> It would at least give plugin implementors the info (short of parsing
> received headers or the log file).
It wouldn't hurt, but it wouldn't help much for Trash Finder. (Parsing the
headers is easy, since we already have them anyway). Certainly the first
header line can be trusted, as it is added by SMPTRCV. (If SMTPRCV is buggy
or trojaned, we're toast anyway; we couldn't trust the RCP either.) TF will
have an option to look at the second header line if the first line shows the
mail came from a known secondary server (that's so we can check based on the
real source of the mail).
(Someone was worried about this line being faked, but that is of course
impossible since the RCP file is constructed by SMPTRCV.)
> It's crossed my mind a few times of adding a plugin system at key points
> in smtprcv (initial connect, mail from, rcpt to, end data). I'd like to
> do it as DLL's for performance, but I guess I could be be compatible
> with mfilter and just run the exe and respond to the result.
That certainly would be preferable, because then filters like TF and AVP
could be directly plugged in. (SCSMFilter itself doesn't provide much
anymore than an engine to launch the filters.)
Randy.
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
