Not spam?
Posted Jan 11, 2007 2:29 UTC (Thu) by
Max.Hyre (subscriber, #1054)
In reply to:
Fingerprinting the World's Mail Servers (O'Reilly) by pheldens
Parent article:
Fingerprinting the World's Mail Servers (O'Reilly)
If they have a clue (and it sounds as if they do), they're sending precisely zero emails. As they note, MTAs typically announce their identities at connection time. For instance:
mhyre@sandia:~$ telnet debian.org 25
Trying 192.25.206.10...
Connected to debian.org.
Escape character is '^]'.
220 gluck.debian.org ESMTP Exim 4.50 Wed, 10 Jan 2007 19:18:31 -0700
quit
221 gluck.debian.org closing connection
Connection closed by foreign host.
mhyre@sandia:~$
We just said ``hi'' to the mail server. It told us it's gluck's ESMTP server, running Exim, and we said ``bye''. This isn't spam, just as pinging a host to see whether it's up isn't a portscan attack.
(
Log in to post comments)