From owner-freebsd-isp Fri Feb 6 19:12:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA24643 for freebsd-isp-outgoing; Fri, 6 Feb 1998 19:12:52 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from news.quiknet.com (mail2.quiknet.com [207.183.249.4]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA24638 for ; Fri, 6 Feb 1998 19:12:50 -0800 (PST) (envelope-from nevin@deepwell.com) Received: from lucas ([207.183.226.20]) by news.quiknet.com (post.office MTA v2.0 0813 ID# 0-12335) with SMTP id AAA3523; Fri, 6 Feb 1998 19:15:12 -0800 Message-ID: <002101bd3375$e3c57240$14e2b7cf@lucas.quiknet.com> Reply-To: "nev" From: "nev" To: "David Babler" , "Darrin R. Woods" Cc: Subject: Re: spammer problem - help! Date: Fri, 6 Feb 1998 19:09:02 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org X-To-Unsubscribe: mail to majordomo@FreeBSD.org "unsubscribe freebsd-isp" could somone PLEASE tell me how to get the f**K off this list. thank you, computerhater -----Original Message----- From: David Babler To: Darrin R. Woods Cc: isp@FreeBSD.ORG Date: Friday, February 06, 1998 4:37 PM Subject: Re: spammer problem - help! > > >On Fri, 6 Feb 1998, Darrin R. Woods wrote: > >> I have applied the spammer patches found at sendmail.org, they include >> disallowing relaying and blocking of hosts. The spammers db file has the >> following entry: >> >> mail.t-1net.com 550 Access Denied >> >> realizing that the "550..." is pretty much ignored and not really sent. I >> build the db file with the following command: > >AFAIK, if you use the key 'mail.t-1net.com', sendmail will get 3 tokens: >'550' 'Access' and 'Denied'. If you want the string back, enclose it in >quotes. > >I *do* recall a similar problem I had - and sendmail.org told me that maps >don't work properly on sendmial 8.8.5. Upgrading to 8.8.7 (and now 8.8.8) >made that problem go away. It seems to me that when I tested the rules, >using sendmail -bt, the map lookups seemed to work okay but when sendmail >was actually running, the lookups would fail. > >If you run 'sendmail -bt' and then do a map lookup: > > sendmail -bt > > /map spammers mail.t-1net.com > >You should get: > > map_lookup: spammers (mail.t-1net.com) returns 550 Access Denied > >As others have mentioned, this mail is NOT coming from t-1net.com at all; >the example you showed came from a UU.net dialup. Nevertheless, you should >be able to trap the envelope address, bogus or not. A far more useful rule >to apply is to require the sender's address to validate. > >-Dave > >