WCSAP
Wildcat! Sender Authorization Protocol
(c) copyright 2003-2019 Santronics Software,Inc.


Santronics Software, Inc (SSI),  with its continued efforts to combat electronic mail abuse also known as "spam," offers a suite of advanced anti-spam technologies and methods called WCSAP,  Wildcat! Sender Authorization Protocol.

How it works:

In the SMTP email world, it works because the final destination (the recipient) receiver system do not required authentication.  The connecting client need only anonymous access.    Authentication is only required when a route or relay is required. If this was not possible and authentication was always required, the email system would break down with no one receiving unsolicated mail.

Typical Flow

Figure 1.0 illustrates the basic SMTP protocol state machine.  When a mail client attempts to send mail to your system, it connects to the wcSMTP server and then issues five SMTP commands starting with HELO (or EHLO) to begin a session ending with the QUIT command to close the session. 

In wcSMTP, a validation of the input is done at each state from HELO/EHLO to DATA.  A client can not reach the next state unless it passes the current state.

WCSAP is designed to validate each state upto the DATA state.  If a client passes all the checks WCSAP performed,  then the DATA is transferred.   SMTPFILTER is activated at DATA to analyze the transferred email to finally issue a DATA reception response.

wcSMTP State Machine