On 10/11/10 2:53 PM, David F. Skoll wrote:
Philip Prindeville wrote:
What if I (a) want to TARPIT the connection? I have to wait until MAIL
FROM to do that? And (b) if I want to not accept the connection, but
need to log the 4-tuple (some ISP's insist on this), I'm SOL?
'twould appear so, yes.
Tarpitting from MIMEDefang is a big fail. And I am unaware of any ISP
that insists on the client port number as well as the client IP address.
Could you name one that does?
Regards,
David.
A couple of British ones: btopenworld and virginmedia (though they might be
merged... I lost track).
A few of them use web-forms to submit abuse tickets, and they won't let you
leave that field blank in the web form... I suspect because they are NATting
and need it to identify the client.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
