|
Hello again Anders
I just tested out mail.nimo.dk. There seems to be nothing wrong with it. I sent one empty mail [directly, not using MultiMail]. So don't be surprised with an empty mail from me. I also apologize for the inconvenience caused by a blank mail [I mean I'd find that irritating, so I assume you would too]
Regards
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
I also apologize for the inconvenience caused by a blank mail [I mean I'd find that irritating, so I assume you would too]
Never mind that, but why did you send it manually?
Was it just to check my mailserver?
I can tell you that that mailserver don't work with MultiMail...
Or to say it right, MultiMail don't work with the mailserver at nimo.dk, just tried it again...
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
|
Nish [BusterBoy] wrote:
Yes, I find that so now. It does not work with mail.nimo.dk.
I wonder why! I am debugging it now...
Would you also make it wait for the response to the HELO command, before it send the MAIL command.
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
Anders Molin wrote:
Would you also make it wait for the response to the HELO command, before it send the MAIL command.
It actually sends HELO first, then recv's and then sends MAIL FROM. The reaosn why you saw both together is that it does not recv the greeting. With most servers this is okay as the greeting and the HELO return message are recv'd together.
Thanks
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
With most servers this is okay as the greeting and the HELO return message are recv'd together.
Hmmmm, you _should_ check the code in the greeting, before sending a HELO
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
I think it's a bad idea putting an article out without the sourcecode included by default.
People come here to find out how programming problems are solved, and to learn from that, not for the binaries.
I could use download.com for that, and even if I look at freshmeat, I might even get the sourcecode.
This just turns the whole idea of Code Project upside down.
bye
|
|
|
|
|
Hello Amanjit
I have tried my best to appreciate the thought process that might have lead to this post from you. Before I say anything further, I would like to state here that this tool has been submitted to the freeware tools section. The freeware tools section on the Code Project normally portrays tools that are useful for developers. As I have already mentioned in my article, I developed this particular program while I was developing a Shareware anti-Spam software utility. I have also subsequently put the tool to use for stress testing SMTP servers. Therefore I felt very strongly that this tool might be useful for system administrators wanting to test the strain their SMTP servers can take, and other developers of anti-Spam tools who are looking for a quick and easy way to create test-case flooded-inboxes.
As you might notice if you take a look at the tools section, there is actually a sub section that says, “Tools with source code”. This sub-section would probably feature programs with source code. But this has an automatic implication that the other sub sections need not necessarily feature source code.
I have specific reasons for not including the source code directly. I did that after consultation with a couple of senior CP citizens. You might also notice if you read the article fully, that I have stated that full source code is available on demand. One primary and significant reason for my doing so, is that with just a little bit of tweaking, this program could very easily be used as a high-speed-mail-bombardment tool. As you might notice I have limited the number of simultaneous threads to 10. If this is increased the power of the program as a multi-threaded bomber increases dangerously. I have also removed the body-field from the program. At the worst, assuming someone actually gets flooded, each email will be small on account of having no mail-body.
By the way, the source code for this program is very elementary in nature. It involves very basic worker threads and simple socket connections. Any programmer who knows how to create a worker thread and who has used Winsock would have very little trouble in putting up a similar program in no time at all. I just didn’t want to directly contribute to the malicious spammer community, that’s all. By the way, if anyone actually wants to take a look at the source, I’d we quite willing to mail it to him, if I am convinced he has valid reasons. And you can rest assured, that the code is too natively simple for any great secrecy. But as I already mentioned I was just exerting a nominal amount of caution.
I was quite hurt and wounded by some of your comments. I do hope that at least some of your misjudgments regarding my article have been cleared up. For once, I was trying to behave a little responsibly, and I get formidably admonished for my attempts at prudence.
Kind regards
Yours very truly
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
I was quite hurt and wounded by some of your comments. I do hope that at least some of your misjudgments regarding my article have been cleared up. For once, I was trying to behave a little responsibly, and I get formidably admonished for my attempts at prudence.
Hey Nish,
Don't worry, be happy. Cheer up! You are the best author of CP. Forget about this guys words.
NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH
Mustafa Demirhan
http://www.macroangel.com
Sonork ID 100.9935:zoltrix
|
|
|
|
|
|
Nish, we're in the same boat right now. People have the wrong idea about my motives involved with my projects. Currently I don't bother writing e-mails or messages as long as this one! I don't try to win people's trust or try to convince them of my motives. People will believe what they believe. That's life. Go on with your own work and enjoy it as much as possible, and don't waste your time winning approval. Just my two rupies
- Jason
Do you have a Pulse?
SonorkID: 100.611 Jason
|
|
|
|
|
|
Nish [BusterBoy] wrote:
It's actually 'rupees'
I sit corrected This mistake won't happen again heh.
- Jason
Do you have a Pulse?
SonorkID: 100.611 Jason
|
|
|
|
|
|
You're perfectly right, It was my mistake.
This is the free programming tools section. No souce code is needed.
Now please don't cry ( <---! )
But ...
If I do such a thing as testing a SMTP implementation, I actually do need the source code to find out if I am benching anything sensible or just measuring "something". Once again, this is not the point, my main complaint was wrong - source code does not have to be included - and I apologize for that.
Again, I think every kiddie with a perl interpreter and CPAN at hand can create a similar flooding tool, AND if he happens to possess an account to an obscenlely fast university UNIX server /w perl installed (i.e. EVERY university server) he can perfectly exploit the bandwidth provided there.
However I wish you a nice weekend
Bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
|
And another thing:
1) if an average lamer wants to use your program to do some serious spamming / mail bombardment, he just needs the binary, and this is actually what he gets.
2) If you would provide the source code, that guy probably wouldn't be able to compile that stuff.
3) An advanced person intended to do some exploitation probably can put up his own tools (i.e. perl).
again, you do _not_ have to provide the source code, it is your right, and do not feel obliged to do so.
Once again, I am sorry if you feel offended.
bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
Hi,
Amanjit Gill wrote:
1) if an average lamer wants to use your program to do some serious spamming / mail bombardment, he just needs the binary, and this is actually what he gets.
I think the point here Nish limitted the Threads to 10 so it can't be used too maliciously.
What Nish is trying to do is to release the source only to responsible folk I guess, ( I don't know how he can determine that though )
Sure this is quite a simple project, even I could build one of these.
But yes like you said its released as a tool rather than as a example, and it might save someone a bit of work if they find the tool here.
Releasing a tool like this for good rather than evil is a tricky proposition in the best of scenarios. A bit like releasing Crypto Info, you never know who is going to use it.
|
|
|
|
|
Yeah
in the early 90ties Germa right wing neo nazis set up a mailbox system called thule basically based on fidonet technique and uses phil zimmermanns PGP for heavy-weight protection.
But you just cannot turn back time
bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
Amanjit Gill wrote:
in the early 90ties Germa right wing neo nazis set up a mailbox system called thule basically based on fidonet technique and uses phil zimmermanns PGP for heavy-weight protection.
But you just cannot turn back time
Cool. Thanks for the information.
In the hollywood movies a bombing tool would probably be shown as a full fledged multimedia app with sounds and special effects like in that John Travolta movie, forgot the name.
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
|
Amanjit Gill wrote:
1) if an average lamer wants to use your program to do some serious spamming / mail bombardment, he just needs the binary, and this is actually what he gets.
True.
Amanjit Gill wrote:
2) If you would provide the source code, that guy probably wouldn't be able to compile that stuff.
Huh? You mean he'd be so lame, he wouldn't be able to open Visual Studio and hit Build?
Amanjit Gill wrote:
3) An advanced person intended to do some exploitation probably can put up his own tools (i.e. perl).
Yes
But I never saw a multi threaded one so far. I did a heavy search for such tools while I was developing POP3P and found most of them useless for my purposes.
Amanjit Gill wrote:
Once again, I am sorry if you feel offended.
Thanks. I get offended really fast. Perhaps I should get out of this character of mine fast.
Regards
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
First of all, I have to commend your good work
Nish [BusterBoy] wrote:
I just didn’t want to directly contribute to the malicious spammer community
However, I find this argument not as strong as you would think. Don't you think pieces of code to do actual spamming is already out there?
I would suggest that to prevent newbies from making a mistake, while learning this tool, inadvertantly turning the test util into a email bomber may be a better argument.
I know, it is wording related, but wouldn't that be less confrontational? These days there are just too much heat in any forum/newsgroup/discussion board...
|
|
|
|
|
Hi Amanjit Gill
Email bomber == SMTP+CreateThread
nothing more.. so Do ur own
else check my email bombers source
http://www20.brinkster.com/hirosh/Myvc.htm
hir
|
|
|
|
|
sarkasm deluxe
*NO* I am not interested in an email bomber
*YES* I could easily write one on my own.
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|