Glad to see others are using those [EMAIL PROTECTED] addresses to complain about
spam. There's no other recourse short of using a spam filter when people
send spam from legitimate networks.
Sometimes I can get good information about who to send complaints to by
doing a whois on the IP address of the offending mailer. I've come accross
instances where people have set up a proper mail server with it's own FQDN
for the sole purpose of sending spam. Doing a whois on the IP address can
sometimes tell you their provider is.
Sendmail, although disliked by some, is TCP wrappers friendly and I'm using
it to explicitly disallow some domains. I'm also disallowing unknown hosts.
Many spammers use client side mailers that don't have good reverse lookups
so that gets quite a few of them. However, I had one get past my wrappers
called "showme". It looked up and everything. I didn't know that could be
done. I thought all FQDN's had to be "foo dot foo" at least.
The problem is not all legitimate mail servers have their DNS set up
properly so I lose a few. It's irritating when legitimate providers set up
a mail server and fail to set up the reverse zone as well. It would be a
good tool to help keep spammers out if you could count on good reverse
lookups. As it stands, people can't always connect to my server if their
provider is an idiot.
I'd like to look into using a mail filter like Spam Assassin. I don't know
much about them or what is available for Linux and Sendmail. Can anyone
give me some tips?
Thanks,
- Craig
----- Original Message -----
From: "Todd A. Jacobs" <[EMAIL PROTECTED]>
To: "Reno Linux Users Group" <[EMAIL PROTECTED]>
Sent: Wednesday, March 05, 2003 1:31 AM
Subject: [RLUG] Script: apnic.sh
If you spend a lot of time tracking down spammers, you might find my new
apnic.sh script useful. It parses the APNIC database for administrative
and technical contacts. Those addresses, in turn, can lend clues to the
proper domain to look up over at abuse.net.
http://www.codegnome.org/scripting/showscript.php?script=apnic.sh
If anyone has a similar tool, I'd love to see it, especially if it does a
better job of determining abuse addresses.
--
"Of course I'm in shape! Round's a shape, isn't it?"
_______________________________________________
RLUG mailing list
[EMAIL PROTECTED]
http://www.rlug.org/mailman/listinfo/rlug
_______________________________________________
RLUG mailing list
[EMAIL PROTECTED]
http://www.rlug.org/mailman/listinfo/rlug
