spammer using cancel evading technique
Tomasz R. Surmacz
tsurmacz at ict.pwr.wroc.pl
Thu Dec 4 02:38:26 UTC 2003
Russ Allbery wrote on Tue, Dec 02, 2003 at 06:18:03PM -0800:
> Piotr KUCHARSKI <chopin at sgh.waw.pl> writes:
> > Tomasz Surmacz suggested that perhaps innd could take care of this
> > problem, checking whether a post with "Message-ID: <cancel.X>" also
> > contains "Control: cancel X" and accept it, if so, as this generates two
> > entries in a history (for X and cancel.X) and eliminates this problem.
> Yup, you can definitely do that in a local Perl or Python filter and it's
> not a bad idea for inclusion in something like Cleanfeed.
But due to the efficiency reasons, wouldn't it be better to include it
in actual innd C code? So far, this is not a big problem, as such
pseudo-cancels are not common yet, but I bet they will spread if we do
not take some action.
(_ _' __) Tomasz R. Surmacz, PGP key Id: 56A1520D, tsurmacz at adm.usenet,pl
| (__ \ pl.* news hierarchy FAQ: http://www.usenet.pl/doc/news-pl-faq.html
|__(____/ English version http://www.usenet.pl/doc/news-pl-new-site-faq.html
More information about the inn-bugs