[Mimedefang] Fwd: Re: Accessing the source/destination port #'s at filter_relay
Philip Prindeville
philipp_subx at redfish-solutions.com
Mon Oct 11 18:31:03 EDT 2010
On 10/11/10 2:53 PM, David F. Skoll wrote:
> Philip Prindeville wrote:
>
>> What if I (a) want to TARPIT the connection? I have to wait until MAIL
>> FROM to do that? And (b) if I want to not accept the connection, but
>> need to log the 4-tuple (some ISP's insist on this), I'm SOL?
> 'twould appear so, yes.
>
> Tarpitting from MIMEDefang is a big fail. And I am unaware of any ISP
> that insists on the client port number as well as the client IP address.
> Could you name one that does?
>
> Regards,
>
> David.
A couple of British ones: btopenworld and virginmedia (though they might be merged... I lost track).
A few of them use web-forms to submit abuse tickets, and they won't let you leave that field blank in the web form... I suspect because they are NATting and need it to identify the client.
More information about the MIMEDefang
mailing list