Path: news.mitre.org!blanket.mitre.org!news.tufts.edu!cam-news-feed5.bbnplanet.com!cam-news-hub1.bbnplanet.com!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!news-peer.gip.net!news.gsl.net!gip.net!news.new-york.net!news.kjsl.com!mvb.saic.com!mx-list From: Hunter Goatley Newsgroups: vmsnet.mail.mx Subject: Re: SPAM, MX5.0 and norelay - Thoughts Message-ID: <009BD94E.E997B65E.3@goat.process.com> Date: Thu, 20 Nov 1997 15:10:33 -0600 Organization: Mx-List<==>Vmsnet.Mail.Mx Gateway X-Gateway-Source-Info: Mailing List Lines: 34 levitte@lp.se (Richard Levitte - VMS Whacker) writes: > >In article <009BD788.232FC7F2.38@ALPHA.WKU.EDU> Hunter Goatley writes: > > The way MX's anti-relay stuff works is that it checks the MAIL FROM: > and RCPT TO: looking for at least one match on a LOCAL PATH or LOCAL > DOMAIN. This isn't as waterproof as other methods, but in practice, > it has eliminated all of the relaying at the beta sites, AFAIK. > >Unfortunately, you can lie in the MAIL FROM: command as well, and I've >had a few doing that to me (yep!). > Yes, that is true. >The popular solution with sendmail is instead to do a reverse lookup >on the clients address and to check THAT against the local paths and >the local domains. > Yep. I can see potential problems with that too, though (blocking legitimate users). >BTW, have you checked http://maps.vix.com/rbl/ yet? It's an >anti-spammer service that works through lookup of IP numbers in >backward order with the domain rbl.maps.vix.com appended to it. >Pretty neat. Could it be a good to support that kind of feature? > Yes, this has been implemented as a latent (undocumented) feature of MX V5.0. Hunter ------ Hunter Goatley, Process Software, http://www.process.com/ MultiNet & TCPware: The Best TCP/IP for OpenVMS http://www.madgoat.com/hunter.html