Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Loops in Firewalls mailing list again
From: long-morrow @ CS . YALE . EDU
Date: Fri, 26 Apr 1996 14:15:47 -0400 (EDT)
To: ari @ bear . com, firewalls @ greatcircle . com

>I wonder if the MajorDomo software can be configured to discard any
>messages which already have Received: headers indicating that the
>message has been processed by this server.  Notice the Received:
>headers in the enclosed message, which is only the latest in a 
>long round of these loops I have seen this week.  This message has gone 
>through GreatCircle 3 times now, through 2 other loopers.

Better than that (parsing Received: headers for hostnames), why not
modify the mailing list software to insert a custom RFC822 X-tended
header into each message forwarded to mark the fact that the message
has been forwarded to the list and then check for such headers on
incoming messages and reject them.

The header could look like this:

X-Already-Seen-On-Mailing-List: Firewalls @
 GreatCircle .
 COM


This would seem to provide a simple way to short-circuit loops.
Anyone want to implement this????

--------------
H. Morrow Long, Mgr of Dev., Yale Univ., Comp Sci Dept, 011 AKW, New Haven, CT
06520-8285,	VOICE:	(203)-432-{1248,1254}		FAX:	(203)-432-0593
INET: Long-Morrow @
 CS .
 Yale .
 EDU UUCP: yale!Long-Morrow BITNET: Long-Morrow @
 YaleCS
WWW:	http://www.cs.yale.edu/users/long-morrow.html



Follow-Ups:
Indexed By Date Previous: Gauntlet - Better front end available???
From: "Ben Goodyear" <ac141 @ typhoon . dial . pipex . net>
Next: Firewall intergrity testing services
From: equaad @ indigo . mit . edu
Indexed By Thread Previous: Loops in Firewalls mailing list again
From: Ari Rabinowitz <ari @ bear . com>
Next: Re: Loops in Firewalls mailing list again
From: "<root>" <root @ wolf . microserve . com>

Google
 
Search Internet Search www.greatcircle.com