Bugtraq mailing list archives
Re: sendmail 8.9.3 patches to curb RCPT harvesters
From: twp () ROOTSWEB COM (Tim Pierce)
Date: Sat, 13 Mar 1999 01:47:58 -0500
On Thu, Mar 11, 1999 at 07:31:21PM -0500, Peter W wrote:
Aleph One wrote:I am killing the spam address harvesting thread unless someone posts some actual code.Per Joseph's suggestion. Use these patches against sendmail 8.9.3 and add O RCPTFailDelay=30 to sendmail.cf to make sendmail sleep() for 30 seconds before reporting any "550" errors. Set the value to 0 for "normal" behavior.
According to the reports I'm seeing, GeoList Pro does not wait for a response from the server -- instead, it streams the RCPT TO commands continuously and then reads the results at the end of transmission. If that is the case, it doesn't sound like this patch will have any effect. -- Regards, Tim Pierce RootsWeb Genealogical Data Cooperative system obfuscator and hack-of-all-trades
Current thread:
- sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 11)
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Tim Pierce (Mar 12)
- <Possible follow-ups>
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 13)
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Andy Church (Mar 13)
- /usr/bin/doscmd on BSDI kasper (Mar 13)
- Re: /usr/bin/doscmd on BSDI Warner Losh (Mar 17)
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Aggelos P. Varvitsiotis (Mar 15)
- Lynx 2.8 overflow Mixter (Mar 15)
- ISS Security Advisory: LDAP Buffer overflow against Microsoft X-Force (Mar 16)
- Microsoft Security Bulletin (MS99-009) aleph1 () UNDERGROUND ORG (Mar 16)
- /usr/bin/doscmd on BSDI kasper (Mar 13)