From: Devdas Bhagat (no email)
Date: Sat Feb 03 2007 - 12:28:05 EST
On 01/02/07 10:46 +0100, Rocco Scappatura wrote:
<snip>
> I know that a such report can not to say the truth as the IP can be
> spoofed, but I want to have a view of the clients that (try to)
> establish an SMTP connection with my SMTP server.
>
IP spoofing is much easier with UDP and ICMP, but quite difficult with
TCP (If Postfix sees the connection, there has been a successful three
way handshake, and that implies the IP was not spoofed or the attacker
had enough control over your end network that you are screwed anyway).
Devdas Bhagat
|
|
|