At 1:31 PM +0100 10/10/02, Steve Linford  imposed structure on a 
stream of electrons, yielding:
>From Bill Cole, received 9/10/02, 12:19 pm -0400 (GMT):
>>  I accept some blame for this, as I screamed at Vlad publicly on
>>  this list back around 1997 about a brief period where SIMS was
>>  trying to validate HELO.
>>
>>  It might be a very good idea for SIMS to modify that behavior a
>>  bit, and instead of trying to fully validate the HELO argument,
>>  just chuck out the obviously bogus case of using the server's own
>>  name or anything routed to error.
>
>That would be an excellent mechanism, quite a lot of the spam 
>hitting traps here gave the HELO using the destination domain's MX, 
>many of the Nigerian 419s do too. If there was actually a mechanism 
>to specify bogus HELOs to ban that would be great as so much spam 
>uses things like "HELO hotmail.com" and "HELO yahoo.com" which are 
>always bogus.


Umm....no. Hotmail has machines that say 'HELO hotmail.com' For example:

>Received: from [64.4.30.95] (HELO hotmail.com)
>   by sc1.scconsult.com (Stalker SMTP Server 1.8b9d14)
>   with ESMTP id S.0000246270 for <[EMAIL PROTECTED]>; Mon, 02 Sep 
>2002 22:01:35 -0400



>
>But I don't see this (or any other feature) being added to a future 
>version of SIMS because, I hope I'm mistaken but I don't think there 
>will be any further version of SIMS. I imagine SIMS development has 
>ended.


I very much hope that you are wrong.
-- 
Bill Cole                                  
[EMAIL PROTECTED]


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to