This 419 slipped past all our defences. None of the usual "nigerian" rules
in SpamAssassin fired.
However, it appears that had we presented an ESMTP SIZE parameter with the
callback, we could have known something was up:
220 mk-cpfrontend.uk.tiscali.com ESMTP Service (6.7.018) ready
EHLO bowling.cent.gla.ac.uk
250-mk-cpfrontend.uk.tiscali.com
250-DSN
250-8BITMIME
250-PIPELINING
250-HELP
250-AUTH CRAM-MD5 DIGEST-MD5 PLAIN
250-DELIVERBY 300
250 SIZE
MAIL FROM: <> SIZE=1000
250 MAIL FROM:<> OK
RCPT TO: <bekimulete@???>
552 RCPT TO:<bekimulete@???> Mailbox disk quota exceeded
No doubt the mailbox was full due the overwhelming number of replies from
people eager to take up the kind business proposal ;-)
As I understand it, part of the rationale of callbacks is to check a
sender address is valid, so if we have to send back a bounce for some
reason, we can do so OK. If instead it appears impossible to send a
bounce, then policy allows us to refuse to accept the mail in the first
place.
So it doesn't seem too much of a stretch to attempt to check we can send a
bounce of a plausible SIZE ?
Just a thought!
Chris
--
Chris Edwards, Glasgow University Computing Service
Return-path: <bekimulete@???>
Received: from mail.xentrisllc.com ([66.80.139.122]
helo=sbs1.xentrisllc.com)
by othello.physics.gla.ac.uk with esmtp (Exim 4.14)
id 1A6GW2-00006Y-CH; Sun, 05 Oct 2003 22:34:10 +0100
Received: from smtp0522.mail.yahoo.com ([200.83.185.203]) by
sbs1.xentrisllc.com with Microsoft SMTPSVC(5.0.2195.6713);
Sun, 5 Oct 2003 16:34:06 -0500
Date: Sun, 5 Oct 2003 21:34:07 GMT
From: bekimulete@???
X-Priority: 3
To: flavell@???
Subject: From:Beki
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <SBS1kvuKMQAjEFWbdM80003ed5a@???>
X-OriginalArrivalTime: 05 Oct 2003 21:34:07.0789 (UTC)
FILETIME=[684855D0:01C38B88]
>From ;Beki
Good Day,
With warm hearts I offer my friendship, and my greetings, and I hope this
letter meets you in good time. It will be surprising to you to receive
this proposal from me since you do not know me personally. However, I am
sincerely seeking your confidence in this transaction, which I propose
with my free mind and as a person of integrity.
[ snip ]
