|
Nish [BusterBoy] wrote:
Now Anders please verify what I have said and reply again.
Just did that, and sorry, but I'm right, it never sends any mails.
Nish [BusterBoy] wrote:
I fully appreciate creative criticism. But blindly calling a tool useless is not nice at all.
No it's not, but when a SMTP Stress tool can not send mails, and even if it could, the mails would be empty, I'd call it useless, sorry.
At least let it send 500k of "x" in each mail, then you would also test if the mailserver could handle some data and store it on disk quick enough.
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
Anders Molin wrote:
but when a SMTP Stress tool can not send mails, and even if it could, the mails would be empty, I'd call it useless, sorry.
But it works with just about every other SMTP server.
Why didnt you think that it might be a small bug in the program that prevents it from working with certain SMTPs.
How could you actually assume something?
Anyway, it does not work with mail.nimo.dk
I am trying to get at it.
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
Why didnt you think that it might be a small bug in the program that prevents it from working with certain SMTPs.
How could you actually assume something?
I assumed what?
I saw a tool that didn't work the way it's supposed to, and then I said buggy, what's wrong with that?
Of course it's just a small bug, but when a bug prevents a program from working, then it's useless until the bug is fixed.
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
|
Hello again Anders
I just tested out mail.nimo.dk. There seems to be nothing wrong with it. I sent one empty mail [directly, not using MultiMail]. So don't be surprised with an empty mail from me. I also apologize for the inconvenience caused by a blank mail [I mean I'd find that irritating, so I assume you would too]
Regards
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
I also apologize for the inconvenience caused by a blank mail [I mean I'd find that irritating, so I assume you would too]
Never mind that, but why did you send it manually?
Was it just to check my mailserver?
I can tell you that that mailserver don't work with MultiMail...
Or to say it right, MultiMail don't work with the mailserver at nimo.dk, just tried it again...
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
|
Nish [BusterBoy] wrote:
Yes, I find that so now. It does not work with mail.nimo.dk.
I wonder why! I am debugging it now...
Would you also make it wait for the response to the HELO command, before it send the MAIL command.
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
Anders Molin wrote:
Would you also make it wait for the response to the HELO command, before it send the MAIL command.
It actually sends HELO first, then recv's and then sends MAIL FROM. The reaosn why you saw both together is that it does not recv the greeting. With most servers this is okay as the greeting and the HELO return message are recv'd together.
Thanks
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
With most servers this is okay as the greeting and the HELO return message are recv'd together.
Hmmmm, you _should_ check the code in the greeting, before sending a HELO
- Anders
Money talks, but all mine ever says is "Goodbye!"
|
|
|
|
|
I think it's a bad idea putting an article out without the sourcecode included by default.
People come here to find out how programming problems are solved, and to learn from that, not for the binaries.
I could use download.com for that, and even if I look at freshmeat, I might even get the sourcecode.
This just turns the whole idea of Code Project upside down.
bye
|
|
|
|
|
Hello Amanjit
I have tried my best to appreciate the thought process that might have lead to this post from you. Before I say anything further, I would like to state here that this tool has been submitted to the freeware tools section. The freeware tools section on the Code Project normally portrays tools that are useful for developers. As I have already mentioned in my article, I developed this particular program while I was developing a Shareware anti-Spam software utility. I have also subsequently put the tool to use for stress testing SMTP servers. Therefore I felt very strongly that this tool might be useful for system administrators wanting to test the strain their SMTP servers can take, and other developers of anti-Spam tools who are looking for a quick and easy way to create test-case flooded-inboxes.
As you might notice if you take a look at the tools section, there is actually a sub section that says, “Tools with source code”. This sub-section would probably feature programs with source code. But this has an automatic implication that the other sub sections need not necessarily feature source code.
I have specific reasons for not including the source code directly. I did that after consultation with a couple of senior CP citizens. You might also notice if you read the article fully, that I have stated that full source code is available on demand. One primary and significant reason for my doing so, is that with just a little bit of tweaking, this program could very easily be used as a high-speed-mail-bombardment tool. As you might notice I have limited the number of simultaneous threads to 10. If this is increased the power of the program as a multi-threaded bomber increases dangerously. I have also removed the body-field from the program. At the worst, assuming someone actually gets flooded, each email will be small on account of having no mail-body.
By the way, the source code for this program is very elementary in nature. It involves very basic worker threads and simple socket connections. Any programmer who knows how to create a worker thread and who has used Winsock would have very little trouble in putting up a similar program in no time at all. I just didn’t want to directly contribute to the malicious spammer community, that’s all. By the way, if anyone actually wants to take a look at the source, I’d we quite willing to mail it to him, if I am convinced he has valid reasons. And you can rest assured, that the code is too natively simple for any great secrecy. But as I already mentioned I was just exerting a nominal amount of caution.
I was quite hurt and wounded by some of your comments. I do hope that at least some of your misjudgments regarding my article have been cleared up. For once, I was trying to behave a little responsibly, and I get formidably admonished for my attempts at prudence.
Kind regards
Yours very truly
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|
Nish [BusterBoy] wrote:
I was quite hurt and wounded by some of your comments. I do hope that at least some of your misjudgments regarding my article have been cleared up. For once, I was trying to behave a little responsibly, and I get formidably admonished for my attempts at prudence.
Hey Nish,
Don't worry, be happy. Cheer up! You are the best author of CP. Forget about this guys words.
NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH NISH
Mustafa Demirhan
http://www.macroangel.com
Sonork ID 100.9935:zoltrix
|
|
|
|
|
|
Nish, we're in the same boat right now. People have the wrong idea about my motives involved with my projects. Currently I don't bother writing e-mails or messages as long as this one! I don't try to win people's trust or try to convince them of my motives. People will believe what they believe. That's life. Go on with your own work and enjoy it as much as possible, and don't waste your time winning approval. Just my two rupies
- Jason
Do you have a Pulse?
SonorkID: 100.611 Jason
|
|
|
|
|
|
Nish [BusterBoy] wrote:
It's actually 'rupees'
I sit corrected This mistake won't happen again heh.
- Jason
Do you have a Pulse?
SonorkID: 100.611 Jason
|
|
|
|
|
|
You're perfectly right, It was my mistake.
This is the free programming tools section. No souce code is needed.
Now please don't cry ( <---! )
But ...
If I do such a thing as testing a SMTP implementation, I actually do need the source code to find out if I am benching anything sensible or just measuring "something". Once again, this is not the point, my main complaint was wrong - source code does not have to be included - and I apologize for that.
Again, I think every kiddie with a perl interpreter and CPAN at hand can create a similar flooding tool, AND if he happens to possess an account to an obscenlely fast university UNIX server /w perl installed (i.e. EVERY university server) he can perfectly exploit the bandwidth provided there.
However I wish you a nice weekend
Bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
|
And another thing:
1) if an average lamer wants to use your program to do some serious spamming / mail bombardment, he just needs the binary, and this is actually what he gets.
2) If you would provide the source code, that guy probably wouldn't be able to compile that stuff.
3) An advanced person intended to do some exploitation probably can put up his own tools (i.e. perl).
again, you do _not_ have to provide the source code, it is your right, and do not feel obliged to do so.
Once again, I am sorry if you feel offended.
bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
Hi,
Amanjit Gill wrote:
1) if an average lamer wants to use your program to do some serious spamming / mail bombardment, he just needs the binary, and this is actually what he gets.
I think the point here Nish limitted the Threads to 10 so it can't be used too maliciously.
What Nish is trying to do is to release the source only to responsible folk I guess, ( I don't know how he can determine that though )
Sure this is quite a simple project, even I could build one of these.
But yes like you said its released as a tool rather than as a example, and it might save someone a bit of work if they find the tool here.
Releasing a tool like this for good rather than evil is a tricky proposition in the best of scenarios. A bit like releasing Crypto Info, you never know who is going to use it.
|
|
|
|
|
Yeah
in the early 90ties Germa right wing neo nazis set up a mailbox system called thule basically based on fidonet technique and uses phil zimmermanns PGP for heavy-weight protection.
But you just cannot turn back time
bye
______________________________
Java: The living proof Moore's law won't solve all your problems
|
|
|
|
|
Amanjit Gill wrote:
in the early 90ties Germa right wing neo nazis set up a mailbox system called thule basically based on fidonet technique and uses phil zimmermanns PGP for heavy-weight protection.
But you just cannot turn back time
Cool. Thanks for the information.
In the hollywood movies a bombing tool would probably be shown as a full fledged multimedia app with sounds and special effects like in that John Travolta movie, forgot the name.
Nish
My most recent CP article :-
A newbie's elementary guide to spawning processes
www.busterboy.org
|
|
|
|
|