[Mimedefang] Fwd: Re: Accessing the source/destination port #'s at filter_relay

Philip Prindeville philipp_subx at redfish-solutions.com
Mon Oct 11 18:31:03 EDT 2010


  On 10/11/10 2:53 PM, David F. Skoll wrote:
> Philip Prindeville wrote:
>
>> What if I (a) want to TARPIT the connection?  I have to wait until MAIL
>> FROM to do that?  And (b) if I want to not accept the connection, but
>> need to log the 4-tuple (some ISP's insist on this), I'm SOL?
> 'twould appear so, yes.
>
> Tarpitting from MIMEDefang is a big fail.  And I am unaware of any ISP
> that insists on the client port number as well as the client IP address.
> Could you name one that does?
>
> Regards,
>
> David.

A couple of British ones: btopenworld and virginmedia (though they might be merged...  I lost track).

A few of them use web-forms to submit abuse tickets, and they won't let you leave that field blank in the web form...  I suspect because they are NATting and need it to identify the client.







More information about the MIMEDefang mailing list