I got Sendmail 8.12.6/8.12.7 on my FreeBSD 4.7 STABLE system and I've recently been working with it to stop spam coming through to my email users. I've added several "FEATURES" in the freebsd.mc file and compiled a new sendmail.cf file which works pretty good. However, I'm seeing more and more of lines in my maillog like the line below:

Feb 26 09:13:00 myserver sendmail[52405]: h1Q8CxZw052405: <[EMAIL PROTECTED]>... User unknown
Feb 26 09:13:00 myserver sendmail[52405]: h1Q8CxZw052405: from=<>, size=3411, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mxo1.vol.cz []

The spammer is always using an empty from field and the spammer is obviously trying lots of different combinations just to see if it will match. I read on the sendmail.org site that there is a workaround to prevent spammers do this in 8.12.6.

My question is, where should I put this in in my proto.m4 file? The file is rather large and I really don't know where.

Index: proto.m4
RCS file: /cvs/cf/m4/proto.m4,v
retrieving revision 8.649.2.12
retrieving revision 8.649.2.13
diff -u -r8.649.2.12 -r8.649.2.13
--- proto.m4 3 Dec 2002 16:48:37 -0000 8.649.2.12
+++ proto.m4 4 Dec 2002 00:12:18 -0000 8.649.2.13
@@ -1761,6 +1761,9 @@
dnl workspace: {client_name} $| {client_addr}
R$+ $| $+ $: $>D < $1 > <?> <+ Connect> < $2 >
dnl workspace: <result-of-lookup> <{client_addr}>
+dnl OR $| $+ if client_name is empty
+R $| $+ $: $>A < $1 > <?> <+ Connect> <> empty client_name
+dnl workspace: <result-of-lookup> <{client_addr}>
R<?> <$+> $: $>A < $1 > <?> <+ Connect> <> no: another lookup
dnl workspace: <result-of-lookup> (<>|<{client_addr}>)
R<?> <$*> $: OK found nothing

Also, there are 2 proto.m4 files:


Which one should I edit & use?

When I'm compiling up a new sendmail.cf file I do this:

cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.orig
cd /usr/src/etc/sendmail
cp freebsd.mc freebsd.mc.orig
[edit freebsd.mc]
make freebsd.cf
make freebsd.cf install
cd /usr/obj/usr/src/etc/sendmail/
cp freebsd.cf /etc/mail/sendmail.cf
killall -1 sendmail


Andreas Widerĝe Andersen <[EMAIL PROTECTED]>
Pragma AS


To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message

Reply via email to