spammer using cancel evading technique

Tomasz R. Surmacz tsurmacz at ict.pwr.wroc.pl
Thu Dec 4 02:38:26 UTC 2003


Russ Allbery wrote on Tue, Dec 02, 2003 at 06:18:03PM -0800:
> Piotr KUCHARSKI <chopin at sgh.waw.pl> writes:
> 
> > Tomasz Surmacz suggested that perhaps innd could take care of this
> > problem, checking whether a post with "Message-ID: <cancel.X>" also
> > contains "Control: cancel X" and accept it, if so, as this generates two
> > entries in a history (for X and cancel.X) and eliminates this problem.
> 
> Yup, you can definitely do that in a local Perl or Python filter and it's
> not a bad idea for inclusion in something like Cleanfeed.

But due to the efficiency reasons, wouldn't it be better to include it
in actual innd C code?  So far, this is not a big problem, as such
pseudo-cancels are not common yet, but I bet they will spread if we do
not take some action.

Tomasz

-- 
 _________
(_   _' __) Tomasz R. Surmacz,   PGP key Id: 56A1520D,  tsurmacz at adm.usenet,pl
  |  (__  \ pl.* news hierarchy FAQ: http://www.usenet.pl/doc/news-pl-faq.html
  |__(____/ English version http://www.usenet.pl/doc/news-pl-new-site-faq.html


More information about the inn-bugs mailing list