On Mon, Jun 05, 2000 at 06:36:04PM +0200, Petr Novotny wrote:
[snip]
>
> On 5 Jun 00, at 18:28, Peter van Dijk wrote:
>
> > > > - ORBS has IMHO too much false positives
> >
> > That is impossible. ORBS does not list a machine until it has received
> > a relayed test message.
>
> Second (or higher) level relay _is_ a false positive. My ISP has
> been listed recently because they're doing a smarthost for clueless
> companies with dial-up connectivity (and no relay checks). What
> should the poor ISP do?
>
> 1. Tell the customers to go f*ck themselves and cut their service.
> 2. Automagically detect that the customer is being relay-abused.
> 3. Block ORBS tester.
> 4. Let the remaining customers suffer because the smarthost is
> blacklisted.
The only correct choice is 1. If your customer has an open relay, block
them on your own smarthost until they fix their problem.
ORBS has no choice other than list you as an output point, because that is
the only way it will block relayed mail. Blocking the input point is
useless, unless you honor ORBS even for internal hosts.
Greetz, Peter.
--
[EMAIL PROTECTED] - Peter van Dijk [student:developer:madly in love]
