Hi Tim,
> Well if he was denying the spammers ip it would stop any incoming mail,
as I understood this is not a problem at all. The spamer uses a
different smtp server (perhaps his own serer ;-) but fakes the FROM: tag
so that bounces are directed to Ari's mailserver. For short there is no
way to stop the outgoing mail because you do not have access to the
server.
> for
> the mail still in the queue I would setup a .qmail for the "fake" user and
> redirect it to /dev/null
But if there is enough mail to this user this can be a continuing
problem for quite a while.
One way could be to block messages adressed to the user which appers in
the spammers FROM tag. This is theory I do not know how to do this but
perhaps some tcpserver experts know a way to avoid mails for a certain
adress to rech qmail.
/ch
> Problem solved, well except for contacting the spammers isp.
>
> -----Original Message-----
> From: Daniel Augusto Fernandes [mailto:[EMAIL PROTECTED]]
> Sent: Friday, October 27, 2000 12:28 PM
> To: Tim Hunter
> Cc: Ari Arantes Filho; [EMAIL PROTECTED]
> Subject: Re: SPAM - Help!
>
> Tim Hunter wrote:
> >
> > If your using tcpserver, you should be denying his connection.
> >
> > If not you should be, you need to check LWQ for a good reference.
> >
>
> I think his problem is bigger than that! What I understood was that he's
> receiving bounce from lots of the spam destination servers.
>
> --------------------------------------------------------------------
> Daniel Augusto Fernandes (DAF tm) [EMAIL PROTECTED]
> GCSNet http://www.gcsnet.com.br/
> --------------------------------------------------------------------
> Se voc� n�o encontra
> o sentido das coisas
> � porque este n�o
> se encontra, se cria.
> Antoine Saint-Exup�ry
>
> > -----Original Message-----
> > From: Ari Arantes Filho [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, October 27, 2000 11:38 AM
> > To: [EMAIL PROTECTED]
> > Subject: SPAM - Help!
> >
> > Hello,
> >
> > Someone is using another smtp server to send a very big spam, but they
> > write the header with FROM = an unknown user of one of my virtual domains,
> > so postmasters keep sending bounce messages or autoresponders to this
> > unknown user and my postmaster is receving more than 10000 emails.
> >
> > I've temporary created this unknows user, but how can I stop this? I
> > can't remove the domain of my list of virtual domains because there are
> more
> > then 100 valid users to this domain...
> >
> > The spammer is from USA and I'm from Brazil, I don't known this f...
> >
> > I really need help!!!
> >
> > Thanks,
> >
> > Ari
