hi,
[EMAIL PROTECTED] writes:
> On Fri, Oct 27, 2000 at 12:24:39PM -0400, Tim Hunter wrote:
> > Well if he was denying the spammers ip it would stop any incoming mail, for
> > the mail still in the queue I would setup a .qmail for the "fake" user and
> > redirect it to /dev/null
> >
> > Problem solved, well except for contacting the spammers isp.
>
> As Daniel said, the problem is that he's getting the bounces because the spammer
> forged one of his addresses! So he's trying to stop bounces that are originating
> from servers all over the planet (assuming the spammer hit lots of different
> domains). You can't stop that with tcpserver as they are legitimate servers that
> he normally wants to get email from.
>
> In other words, problem not solved.
>
there is a 'badrcptto'-patch on www.qmail.org
this will solve the problem on aris server. but... then he will bomb
postmasteraccounts on other servers. not the best solution for the net.
only cuting of the open relay and hang the admin of this server will solve
this situation.
cu
micha
> > -----Original Message-----
> > From: Daniel Augusto Fernandes [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, October 27, 2000 12:28 PM
> > To: Tim Hunter
> > Cc: Ari Arantes Filho; [EMAIL PROTECTED]
> > Subject: Re: SPAM - Help!
> >
> >
> > Tim Hunter wrote:
> > >
> > > If your using tcpserver, you should be denying his connection.
> > >
> > > If not you should be, you need to check LWQ for a good reference.
> > >
> >
> > I think his problem is bigger than that! What I understood was that he's
> > receiving bounce from lots of the spam destination servers.
> >
> > --------------------------------------------------------------------
> > Daniel Augusto Fernandes (DAF tm) [EMAIL PROTECTED]
> > GCSNet http://www.gcsnet.com.br/
> > --------------------------------------------------------------------
> > Se voc� n�o encontra
> > o sentido das coisas
> > � porque este n�o
> > se encontra, se cria.
> > Antoine Saint-Exup�ry
> >
> > > -----Original Message-----
> > > From: Ari Arantes Filho [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, October 27, 2000 11:38 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: SPAM - Help!
> > >
> > > Hello,
> > >
> > > Someone is using another smtp server to send a very big spam, but they
> > > write the header with FROM = an unknown user of one of my virtual domains,
> > > so postmasters keep sending bounce messages or autoresponders to this
> > > unknown user and my postmaster is receving more than 10000 emails.
> > >
> > > I've temporary created this unknows user, but how can I stop this? I
> > > can't remove the domain of my list of virtual domains because there are
> > more
> > > then 100 valid users to this domain...
> > >
> > > The spammer is from USA and I'm from Brazil, I don't known this f...
> > >
> > > I really need help!!!
> > >
> > > Thanks,
> > >
> > > Ari
> >
