Hello,
I just used dnsstuff to test one of my domain names and it showed me
(the first time only) that my server is an openrelay, which is obviously
not true. This is due to the default behaviour of spamd of accepting
everything, even when a spamd.alloweddomains file is present. I think
this could choke some automated tests as nearly none of them goes to the
point of actually sending data.
here is a well known spamd session:
"
telnet elrond.llorien.org 25
Trying 88.198.156.90...
Connected to elrond.llorien.org.
Escape character is '^]'.
220 elrond.llorien.org ESMTP ; Tue May 22 09:09:33 2007
ehlo test
250 Hello, spam sender. Pleased to be wasting your time.
mail from:<>
250 You are about to try to deliver spam. Your time will be spent, for
nothing.
rcpt to:
250 This is hurting you more than it is hurting me.
"
I know that I can configure spamd to send a 550 error to the client, but
only after DATA, which will clearly almost never happen in automated
tests. So I think it could probably be a good idea to add an option
which makes the 550 reply at RCPT TO for domains not being in
spamd.alloweddomains. This would still allow to make spamtraps but only
those sent at alloweddomains would waste the most time to the sender.
What are your feelings bout this?
