[35365] in bugtraq
Re: Is predictable spam filtering a vulnerability?
daemon@ATHENA.MIT.EDU (David F. Skoll)
Sat Jun 19 04:52:17 2004
Date: Thu, 17 Jun 2004 07:28:45 -0400 (EDT)
From: "David F. Skoll" <dfs@roaringpenguin.com>
To: R Armiento <rar_bt@armiento.se>
Cc: bugtraq@securityfocus.com
In-Reply-To: <200406161326.AA304546076@dewmill.com>
Message-ID: <Pine.LNX.4.58.0406170727510.5272@shishi.roaringpenguin.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Wed, 16 Jun 2004, R Armiento wrote:
> However, 'C':s spam filter silently drops the email.
In my opinion, any spam filter that silently drops e-mail is broken, and
is indeed a security risk. A spam filter MUST respond with a 500 SMTP
failure code if it rejects a message.
Regards,
David.
