Hi. I wrote a couple of modifications to the James SMTP server / handler which help deflect Stuff Posing As Mail.
The mods consist of two additional options, and are controllable through boolean fields in the smtpserver section of the configuration XML file: <!-- Uncomment this if you want to only accept recipients in the local domain. --> <!-- Note that leaving this out will cause all recipients to be valid, but --> <!-- messages to other domains will still process per the above configuration, --> <!-- usually to the spam log. Leave this off while debugging, but if you find --> <!-- a huge number of SPAM messages to other domains, --> <!-- you might want to turn it on. --> <!-- <acceptOnlyLocal>true</acceptOnlyLocal> --> <!-- Uncomment this if you want to ensure a reverse DNS Hostname exists --> <!-- for the IP addresses of incoming connections. Most legitimate email --> <!-- will have a rDNS hostname defined, but often the casual spammer will --> <!-- not. Note that this will cause connectivity problems if a sender's --> <!-- hostname cannot be determined by IP, or if the DNS service is --> <!-- unreliable. --> <!-- <doReverseLookups>true</doReverseLookups> --> The patch affects 4 files: src/conf/james-config.xml src/java/org/apache/james/smtpserver/SMTPHandlerConfigurationData.java src/java/org/apache/james/smtpserver/SMTPHandler.java src/java/org/apache/james/smtpserver/SMTPServer.java The patch file is compared to CVS as of yesterday and available at: http://www.mdve.net/jakarta-james/jakarta-james-cvsdiff.txt The code is pretty tame, it works well for me and I don't think it introduces any bugs. The James subproject is pretty new to me, so if there's a better way to do these, I beg forgiveness for wasting your time and request enlightenment on the Proper Way. I see a lot of goofy connections and receive a lot of open relay tracers, these mods are helping me a lot. I also have a mailet which drives a system command to add a rule to a firewall which blocks sending addresses, I can clean it up and post if there's any interest in this. Roger Venable [EMAIL PROTECTED] -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
