From owner-freebsd-chat Thu Jul 20 6:10:38 2000 Delivered-To: freebsd-chat@freebsd.org Received: from phoenix.welearn.com.au (phoenix.welearn.com.au [139.130.44.81]) by hub.freebsd.org (Postfix) with ESMTP id 21A3B37BCDD for ; Thu, 20 Jul 2000 06:10:30 -0700 (PDT) (envelope-from sue@phoenix.welearn.com.au) Received: (from sue@localhost) by phoenix.welearn.com.au (8.9.3/8.9.3) id XAA32573; Thu, 20 Jul 2000 23:20:53 +1000 (EST) (envelope-from sue) Date: Thu, 20 Jul 2000 23:20:50 +1000 From: Sue Blake To: David Schwartz Cc: Brad Knowles , Brett Glass , Rahul Siddharthan , freebsd-chat@FreeBSD.ORG Subject: Re: ORBS vs MAPS Message-ID: <20000720232048.E4376@welearn.com.au> Mail-Followup-To: David Schwartz , Brad Knowles , Brett Glass , Rahul Siddharthan , freebsd-chat@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.4i In-Reply-To: ; from David Schwartz on Thu, Jul 20, 2000 at 03:02:31AM -0700 Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Jul 20, 2000 at 03:02:31AM -0700, David Schwartz wrote: > > > At 1:40 AM -0700 2000/7/20, David Schwartz wrote: > > > > > So you are saying that if they are testing 'mail.foo.com', > > > they don't try > > > claiming that their mail is from 'foo@mail.foo.com'? If not, > > > they wouldn't > > > catch open relays that allow any mail with a local sender address. > > > No, that's clearly one of the things they do try, but I believe > > that they use an envelope sender address something like > > "orbs-tester@mail.foo.com", so as to give you an indication that this > > is a test. > > > They aren't trying to hide their identity, and they aren't > > forging the headers, because headers != envelope address. > > No law that I know of makes any such distinction. HR3113 is typical of > anti-spam laws, and it states "... any domain name, header information, date > or time stamp, originating electronic mail address, or other information > identifying the initiator or the routing of such message ... is false or > inaccurate. > > The are trying to trick your mail server into relaying for them. That's > exactly the same thing the spammers do. They have no right to do so without > permission. > > They specifically and deliberately provide incorrect information to obtain > access to someone else's machine that they wouldn't otherwise have. The > specific incorrect information they provide is the originator of a request > for access or service. I think you'd find it hard to locate a country > outside the third world where this is legal. And so is mail bombing. They fired a barage of tests at my poor little hard working 386 this morning, probably causing its entire resources to be devoted to those processes for some time. A DOS attack, spam attempt, _and_ attempted illegal access to a computer network? If only they knew who they're messing with, they'd wet their nappies in fear. -- Regards, -*Sue*- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message