CDR: Re: -C-P- Re: would it be so much to ask..

[Jim Choate]

On Wed, 20 Sep 2000, Riad S. Wahby wrote:

> Wrong again.  By default in versions of sendmail since 4.9, all sent
> mails are logged right along with the failures--and this includes the
> IP address from which the connection was made to the SMTP server.

Well that's ALMOST right. Sendmail (and most other programs for that
matter) allow different levels of logging. Tell sendmail not to log and it
won't.

> Finding open relays that don't do logging is difficult at best.

Nah, there's all kinds of ways around that. If it was as simple as
grabbing the source address in a sendmail log most of the spammers would
have been put out of business a long! time ago.

As to finding them, those socialist bastards at ORBS and the like keep
handy lists available.

> > very good chance at hitting something
> 
> Again, I ask you to produce an example of an open relay that you are
> reasonably sure does not do logging.

Irrelevant. Forge your source IP headers.

    ____________________________________________________________________

                     He is able who thinks he is able.

                                           Buddha

       The Armadillo Group       ,::////;::-.          James Choate
       Austin, Tx               /:'///// ``::>/|/      ravage at ssz.com
       www.ssz.com            .',  ||||    `/( e\      512-451-7087
                           -====~~mm-'`-```-mm --'-
    --------------------------------------------------------------------