Hi, * psjbeisler <[email protected]> [2016-11-18 20:05]: > just want to mention ive been getting spam from the following JIDs, > all in russian, trying to get me to buy stuff. > just as a PSA if nothing else, if youre the admin please advise, im sure > theres more.
I've deployed the following mod_firewall rules in prosody to get rid of the incoming spam messages and to block the backchannel to the spammer (requires up-to-date prosody-modules to work): ------------------------------------------------------------ # default chain ::deliver NOT TYPE: groupchat INSPECT: body INSPECT: body#~=forum%.benderbay%.com JUMP_CHAIN=user/abuse NOT TYPE: groupchat INSPECT: body INSPECT: body#~=gidroslonik@0nl1ne%.at JUMP_CHAIN=user/abuse NOT TYPE: groupchat INSPECT: body INSPECT: body#~=reklama@jabme%.de JUMP_CHAIN=user/abuse NOT TYPE: groupchat INSPECT: body INSPECT: body#~=reklama@xabber%.de JUMP_CHAIN=user/abuse # packets from local users ::preroute TO: [email protected] JUMP_CHAIN=user/abuse TO: [email protected] JUMP_CHAIN=user/abuse TO: [email protected] JUMP_CHAIN=user/abuse # generic block rule ::user/abuse BOUNCE=not-allowed (Blocked due to abuse) ------------------------------------------------------------
signature.asc
Description: Digital signature
