From owner-freebsd-questions@FreeBSD.ORG Fri Apr 2 17:37:43 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4737D1065677 for ; Fri, 2 Apr 2010 17:37:43 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id AEADA8FC2B for ; Fri, 2 Apr 2010 17:37:42 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.4/8.14.4) with ESMTP id o32HbcXe074423 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 2 Apr 2010 18:37:38 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <4BB62B62.3090702@infracaninophile.co.uk> Date: Fri, 02 Apr 2010 18:37:38 +0100 From: Matthew Seaman Organization: Infracaninophile User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: Jon Radel References: <201004011751.27767.npapke@acm.org> <4BB58AC2.50009@infracaninophile.co.uk> <4BB5FB51.60207@radel.com> In-Reply-To: <4BB5FB51.60207@radel.com> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.3 at happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL, SPF_FAIL autolearn=no version=3.3.0 X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd-questions@freebsd.org Subject: Re: Sendmail Five Second Greeting Delay X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Apr 2010 17:37:43 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/04/2010 15:12:33, Jon Radel wrote: > This is why there's a school of thought that even if your default for > firewall configuration is to quietly drop unwanted packets, IDENT is a > protocol that you should actively reject. It makes things move along > more quickly. That, and the fact that the ident protocol is utterly pointless -- it's trivially easy for a server to lie about the owner of the other end of a TCP connection. In fact, doing that is a standard part of the functionality of identd implementations. Just a waste of packets. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAku2K2IACgkQ8Mjk52CukIyriQCfWZc/AzYIS/38IVFScCG6jkYb tTMAoItnWUk1g2ClDTR/CWMk47lTdj1B =WYGc -----END PGP SIGNATURE-----