At 9:01 AM -0700 10/9/02, Carl Holmberg imposed structure on a stream of electrons, yielding: >Lately, I've been getting mail from what I suspect is a Windows worm >from various sources. It's especially irritating in that it uses my >own server's domain name in the HELO command. Based on the idea that >SIMS rejects HELO's when I edit the router for the appropriate >address, I added this to the router list: > >apple20.mhpcc.edu = error
Ummmm.... That's going to have some ugly results. Routing one's own server name to error should not be done casually. > >Didn't work. Right, because SIMS doesn't really do anything other than adjust the Received header format based on the 'validity' of the HELO/EHLO argument. That's generally a good idea, since a lot of MTA's use really dumb HELO arguments that don't make any generalizable sense. I accept some blame for this, as I screamed at Vlad publicly on this list back around 1997 about a brief period where SIMS was trying to validate HELO. It might be a very good idea for SIMS to modify that behavior a bit, and instead of trying to fully validate the HELO argument, just chuck out the obviously bogus case of using the server's own name or anything routed to error. -- Bill Cole [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
