🚀 go-pugleaf

On Fri, 28 Mar 1997 16:09:21 +0000, Richard Clayton
<richard@turnpike.com> wrote:

[snip my UCE filtering efforts]

>Indeed, if you reject at MAIL FROM, some clients will resend :(

Actually, as far as the punts are concerned there may be another
problem.

In the first version of the system, I returned a 501 to the MAIL FROM,
and the first time I tried it 'live' something seemed to go wrong
badly somewhere.  I had two mail items on punt2, the first of which
was to be bounced, the second rejected. Punt2 connected and got a 501
to the first MAIL FROM at which point it RSET the session and
disconnected. Fingering post showed that *both* items of mail had
gone, and the second never re-appeared.

Now colour me worried but isn't that not supposed to happen?  I can
understand aborting that particular session as a 5xx code is always
meant to be fatal but it seemed (and I can't check this) that the
second mail item was also bounced without it ever being checked.

>What is "correct" is currently being hashed out by the DRUMS working
>group - however, that won't change the installed base for some time

In the event I've modified it so that it flags a MAIL FROM as bad and
will reject on the RCPT TO with a slightly modified 'mailbox unknown'
return which makes it clear that the mail was rejected as a UCE
avoidance measure.

BTW, if anyone else who uses Alex Chapman's getmail.cmd to get their
mail wants my utility just mail me.  The modifications to the script
are minor and it does seem to work now (at least I'll never see
anything from anyone @enterprise.net anymore :).
--
Andrew Clarke - "If Jesus loves me, why won't he swallow?"
PGP Public Key available. Email address needs to be de-mangled
"Having your nuts nibbled off by a Laplander, that's a way to die."
http://www.plinth.demon.co.uk/ - nothing interesting that way lies