What are they smoking?

Tue Sep 16 01:17:43 UTC 2003

> ----- Original Message -----
> From: "Patrick W. Gilmore" <patrick at ianai.net>
> Date: Monday, September 15, 2003 7:34 pm
> Subject: Re: What *are* they smoking?
>
> >
> > No, it accepts if the from domain exists - but only if it *REALLY*
> > exists.
>
> Anyone want to guess what happens to all those from addresses it captures?

No doubt.. It's unfortunate that they are running a daemon on port 25 on that
box..  and that it actually lets you helo and mail from.. and not until you
get to rcpt to  does it reject.. unless you use a domain its now got cached
in which case it accepts the to: and closes at data. (So, if you rcpt twice,
it'll accept it.. cuz like everyone else, its own dns server resolves
everything)

[netmask at devnull netmask]$ telnet www.oisdufoisdufoisuf.com 25
Trying 64.94.110.11...
Connected to www.oisdufoisdufoisuf.com.

220 snubby3-wceast Snubby Mail Rejector Daemon v1.3 ready

helo ishouldntresolvebutthankstoyouido.com
250 OK

mail from: <ihateverisign at ishouldntresolvebutthankstoyouido.com>
250 OK

rcpt to: <anyone at lkajsdflkjasdflkjasdf.com>
550 User domain does not exist.

rcpt to: <anyone at lkajsdflkjasdflkjasdf.com>
250 OK

data
221 snubby3-wceast Snubby Mail Rejector Daemon v1.3 closing transmission
channel