[Mimedefang] mimedefang behavior pre-HELO and on incomplete connections

David F. Skoll dfs at roaringpenguin.com
Sun Oct 26 19:22:14 EDT 2008


Kelly Jones wrote:

> Can mimedefang reject a connection before it says HELO/EHLO? What
> subroutine does this?

filter_relay is called before HELO/EHLO.

You can do this:

>  % "You are on the list of IP addresses we really really hate, so
>  we're going to kill this connection even before you say HELO!"

But you can't do this:

>  % "OK, it's been 30 seconds since you've seen my banner. Are you
>  going to say HELO or what?"

because Milter doesn't work that way.  Instead, set one of the confTO_XXX
timeouts (as another poster suggested.)

> Semi-related question: what subroutines get triggered for an
> incomplete connection?

> Example: someone connects to my servers, says HELO, and then decides
> to drop the TCP connection before saying "MAIL FROM".

In the MILTER case, that would be:

   xxfi_connect
   xxfi_helo
   xxfi_abort

That would translate to just filter_relay() in the MIMEDefang case.

> I'd like to log this at the mimedefang level (not just the sendmail
> level)-- is there some end_of_connection function that's called?

Not in the Perl code; all those details are hidden in MIMEDefang's C portion.

Regards,

David.



More information about the MIMEDefang mailing list