lkml.org 
[lkml]   [2002]   [Sep]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Stupid anti-spam testings...
On Mon, Sep 02, 2002 at 04:28:37PM -0600, Andreas Dilger wrote:
...
> > Folks, when you deploy that kind of testers, DO VERIFY THAT THEY
> > HAVE SANE CACHES! A positive result shall be cached for at least
> > two hours, a negative result shall be cached for at least 30 minutes.
>
> Do you know if this is one of the default checks from spamassassin?

No idea. I have seen these coming from Exim 4.10, Exim-something,
some sendmail milter (whatever that is), etc..

Apparently the idea (which I have thought of long ago, and rejected
as incomplete) has caught, and has multiple implementations...

> I would imagine that a lot of people (including myself) have it
> installed, so it is possible that it (or some other widely-used tool)
> now does this sort of check out-of-the-box, and the people who are
> installing them have no idea about the kind of load it generates on vger.
> I doubt that there are a large number of people who are independently
> misconfiguring their mail setup this way

I can easily reduce the load impact it causes to vger by
running the smtp server in "accept everything" mode without
analyzing local addresses for existence. With a bit more
work I can throw in local cache.. (which I probably have to do..)

> If it is possible to track what tool is causing the problem and fixing
> the default setup of that tool at the source, it will probably solve
> 99% of the problems in one go (after the list knows to which version
> they should upgrade).

Raise some noise all around, there are multiple implementations
of the idea. Some even with syntactically invalid tester codes
(spaces put in place where they don't belong in RFC 821/2821);
"works with sendmail" is NOT synonymous to "is syntactically
correct."

- a mister at blue-labs.org runs some sendmail-milter which
does testing with invalid protocol syntax
- usw-sf-list1.sourceforge.net use probably their own code
usw-sf-fw2.sourceforge.net too... possibly more systems there..
- quetz.demon.co.uk tests from Exim 4.10
- somebody.symons.net tests from Exim 3.35

Right now something like 5-7 different systems are doing it.
Try to imagine when all 3500 targets do it... BRRRRR...
(Sure, VGER can handle it, no problem, but it is that much
wasted cycles, and network traffic...)

> Cheers, Andreas
> Andreas Dilger

/Matti Aarnio
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:28    [W:0.072 / U:1.284 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site