From: Thorsten Fenk <t.fenk@gmx.net>
Date: Tue, 19 Aug 1997 03:58:45 +0800
To: cypherpunks@cyberpass.net
Subject: Re: Picketing With Packets
In-Reply-To: <19970816212754.10722.qmail@zipcon.net>
Message-ID: <19970818200210.29899@nostromo.ino.de>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="Boundary..3980.1071713723.multipart/signed"

--Boundary..3980.1071713723.multipart/signed
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Bill Stewart (stewarts@ix.netcom.com) wrote :

>(...)
> However, that doesn't really block the spammers who buy a list of
> N million targets and send spam out from their own machines,
> though shutting down Spamford and Harris Marketing would help,
> and would cut down the sales of the lists.

Hi,
ever thougt about a "Teergrube" ?

It's a Patch for sendmail (and smail AFAIR).
It works as follows:
sendmail Messages normally look like this

250 nostromo.ino.de Hello fenkt@localhost [127.0.0.1], pleased to meet you

(Numbercode <Space> Human readable Text)

A Minus Sign instead of the <Space> means, that sendmail waits for the 
current receive to finish.
If such messages appear, say every minute, the Connection stays open for
several hours, without a Timeout from the remote host.

A Teergrube controls a therefor prepared MTA to produce such 
messages; depending on an predefined list of IP Numbers.
It doesn't block all mail from the site; it just makes Bulk (maximal
Amount in shortest possible Time) mail very difficult. A single User
from that site can still send mail to your site, the only thing is
the increased amount of time for delivery.
This is opposite to blocking sites (sendmail 8.8.5 *Scheckrules ); which
is just a self-defense, but not a Solution against UBE.

If you want to try it:
ftp://nutsy.han.de/pub/sendmail/

regards
Thorsten


--Boundary..3980.1071713723.multipart/signed
Content-Type: application/octet-stream; name="pgp00002.pgp"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="pgp00002.pgp"
Content-Description: "PGP signature"
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--Boundary..3980.1071713723.multipart/signed--