On Fri, 27 Oct 2000, [EMAIL PROTECTED] wrote:
> I've temporary created this unknows user, but how can I stop
> this? I can't remove the domain of my list of virtual domains
> because there are more then 100 valid users to this domain...
I find a bit of detective work never goes astray. Look at the Received
headers, see if you can tell the first SMTP server it comes from. Test
it to see if it is an open relay. If it is, you're in trouble because
it is hard to track them. If it isn't, the spam is being sent from a
user authorised to use that server. Easy solution? Create a
~alias/.qmail-user that contains &[EMAIL PROTECTED] or
&postmaster@[ip.addr.of.relay] and let their postmaster deal with it.
Brett.
--
"I don't have anything against geeks. I was one for 11 years! I used
to think PC's were the greatest thing since sliced bread... Then
someone showed me sliced bread."