This approach is a bit different than IMGate because it creates a dynamic tarpit,
based on the "spamminess" of the email. The more tests it fails, the slower the
connection gets...IN REAL TIME! Thats that cool part. From what I understand, IMGate
can only drop the connection...it cannot slow the connection down.
With TarProxy, spam tests can be run at each stage of the SMTP session, before the
next stage begins. For example...
EVENT: Remote Host Connects - dnsbl tests are executed and incremental delays are
applied or connection is dropped.
EVENT: Remote Host sends EHLO - HELO-based tests are executed and incremental delays
are applied or connection is dropped.
EVENT: Remote Host sends MAIL FROM - Domain-based tests are executed and incremental
delays are applied or connection is dropped.
EVENT: Remote Host sends RCPT TO - Recipient-based tests are executed and incremental
delays are applied or connection is dropped.
EVENT: Remote Host sends DATA - Content filtering is executed and incremental delays
are applied or connection is dropped.
-----Original Message-----
From: Smart Business Lists
Sent: Mon, 16 Jun 2003 08:42:56 -0500
Subject: Re: [Declude.JunkMail] DSN:Tarpitting and declude firewall integration
integration integration integration integration integration integration integration
Bill,
Monday, June 16, 2003 you wrote:
BB> Thats what TarProxy sort of does. TarProxy accepts the
BB> inbound SMTP connections and relays them to a backend SMTP
BB> host (imail's smtpd). What I'm saying would be great, is if
BB> TarProxy could call "Declude-like" tests during the SMTP
BB> session... before Imail gets its hands on the email.
Well why not just go with IMGATE and Postfix - already does all
that and much, much more.
Terry Fritts
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
