OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Feature Suggestion: Tar-Pit flag in Postfix 2.1 proxy

From: Wietse Venema (wietseporcupine.org)
Date: Mon Feb 02 2004 - 07:45:53 CST


Rene Bartsch:
> Hi,
>
> I just had the idea to implement a tar-pit flag in the Postfix proxy. If a
> filter (e.g. spam-filter or virus-filter) detects a malicious mail and sets
> the tar-pit flag for a connection, Postfix would keep the SMTP-connection for
> a time specified in TAR_PIT_TIMEOUT in smtpd.conf.
>
> Comments?

It's an old idea that no-one has offered to implement.

To implement would require a command to send the local socket to
a tarpit daemon, so that Postfix can continue serving other customers.

The details of file descriptor passing between processes is a little
system dependent, but nothing that can't be solved with Richard
Stevens UNIX network programming.

The tarpit daemon would not be part of Postfix (maybe a proof of
concept version written in Perl, but no C code).

        Wietse