From owner-freebsd-isp  Fri Sep 12 10:11:42 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id KAA18817
          for isp-outgoing; Fri, 12 Sep 1997 10:11:42 -0700 (PDT)
Received: from GndRsh.aac.dev.com (GndRsh.aac.dev.com [198.145.92.241])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id KAA18771
          for <freebsd-isp@FreeBSD.ORG>; Fri, 12 Sep 1997 10:11:30 -0700 (PDT)
Received: (from rgrimes@localhost) by GndRsh.aac.dev.com (8.8.5/8.7.3) id KAA20718; Fri, 12 Sep 1997 10:10:04 -0700 (PDT)
From: "Rodney W. Grimes" <rgrimes@GndRsh.aac.dev.com>
Message-Id: <199709121710.KAA20718@GndRsh.aac.dev.com>
Subject: Re: spammer used our domain
In-Reply-To: <34193AB0.2781E494@cablenet.net> from Damian Hamill at "Sep 12, 97 01:50:57 pm"
To: damian@cablenet.net (Damian Hamill)
Date: Fri, 12 Sep 1997 10:10:04 -0700 (PDT)
Cc: freebsd-isp@FreeBSD.ORG, jlewis@fdt.net
X-Mailer: ELM [version 2.4ME+ PL25 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> A spammer recently sent an email to members@aol.com using a bogus from
> address as a user in our domain.  I temporarily blocked emails from aol
> but I had to remove the block for obvious reasons.  I am still getting
> replies from indignant people.

I can't help you fix the hate mail being sent to you, but I can
offer the fact that in some states there is case law on the books
with significant damages collected against people who have done
this.  If you have been able to track down the source of the spam
that used your domain address as a reply-to or from field you have
ground for civil and/or criminal action against the party/parties
who created it.

> Is there a rule I can add to "check_rcpt" or another rule set to block
> email from *@aol to postmaster@cablenet.net ?  I'm not a ruleset wizz.
> 
> would this work ?
> 
> R$+		$: $&f $| $1
> R$*@aol.com $| postmaster@cablenet.net	$#error $@ 5.7.1 $: "571 sorry"
> 
> 
> regards
> damian
> 
> -- 
> *    Damian Hamill   M.D.       damian@cablenet.net
> * CableNet & The Landscape Channel
> * http://www.cablenet.net/   http://www.landscapetv.com/
> 


-- 
Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
Accurate Automation, Inc.                   Reliable computers for FreeBSD