Anyone else seeing thousands of messages filling up your queue, apparently
from "[EMAIL PROTECTED]" to addresses such as:
[EMAIL PROTECTED]
Looks like this has started within the hour. Looks like one of our
clients got hit with about 6000 of them, and they're still coming
in.
We're currently just trapping them by setting up anon.lcs.mit.edu in
virtualdomains and directing that to a maildir:
echo anon.lcs.mit.edu:virustrap >>/var/qmail/control/virtualdomains
echo '/path/to/maildir/' >~alias/.qmail-virustrap
maildirmake /path/to/maildir
killall -HUP qmail-send
It seems like putting "[EMAIL PROTECTED]" in badmailfrom may prevent it
from hitting your boxes resources, but we have tons of resources and
would like to check it out a bit.
The message is around 80 lines of 70 column upper-case text, something like:
Subject: i_rz [NZM zmPaLazCnSTOnermbGneLqrmDGbenCfWrCrSXSTiI
GYEPBZDWDNIOFPKVGXPSHSGSFRBVIUNTEBFSDRKTEVLNGCCUKCKCOTCXZNPBFWGBOZ
EZGZMMLYBQGVNQGBGPOXFNONKMDTBMZQHNPVCTLCBTHXGWDSESBWDMZWHOMRNPKUEC
FSOVFVZSDRFNOWHYMZFUDZBUJYJVIMNSDVJYGWFSCMGNDUEBPBDCFUZMMZPVCQMOEM
[...]
Sean
--
Tragedy is when I cut my finger. Comedy is when you fall into an open
sewer and die. -- Mel Brooks
Sean Reifschneider, Inimitably Superfluous <[EMAIL PROTECTED]>
tummy.com - Linux Consulting since 1995. Qmail, KRUD, Firewalls, Python
