From owner-freebsd-isp Fri Mar 31 12: 5: 5 2000 Delivered-To: freebsd-isp@freebsd.org Received: from thehousleys.net (frenchknot.ne.mediaone.net [24.147.224.201]) by hub.freebsd.org (Postfix) with ESMTP id A880537BDC7 for ; Fri, 31 Mar 2000 12:05:01 -0800 (PST) (envelope-from jim@thehousleys.net) Received: from thehousleys.net (baby.int.thehousleys.net [192.168.0.24]) by thehousleys.net (8.9.3/8.9.3) with ESMTP id PAA22928; Fri, 31 Mar 2000 15:04:54 -0500 (EST) Message-ID: <38E504E6.A3420CD8@thehousleys.net> Date: Fri, 31 Mar 2000 15:04:54 -0500 From: James Housley Organization: The Housleys dot Net X-Mailer: Mozilla 4.72 [en] (X11; U; FreeBSD 3.4-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: Robert Hough Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Spam References: <4.2.0.58.20000331144400.00c669a0@qserve.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Robert Hough wrote: > > I'm trying to figure out how to stop some spam from hitting my site, and > have yet to figure it out. From the looks of things, it's like the spam > generator being used is basically hitting a mass bulk of my users in an > alphabetic approach. It even hits names in our /etc/aliases file. Is there > some way these people are doing this, and is there a way to stop it? Here's > a look at what my mail log showed me... > > Mar 31 14:34:09 zoe2 sendmail[18256]: OAA18115: > to=,,, > delay=00:00:47, xdelay=00:00:13, mailer=local, relay=local, stat=Sent > > This of course has been edited, but the user[x] would be the actual > username, and these were all alphabetic in order, and each entry contained > about 25+ addresses. It doesn't hit all of my users, and it shows itself to > be coming from the mail-daemon.... > > Any help would be appreciated in this matter, as this is getting really > annoying, and I'm not sure what the deal is. We are running sendmail 8.9.3 > currently, and yes, and upgrade is on my todo list. > Sounds like an inside job, but you might want to look at: http://maps.vix.com/ specificall RBL and RSS. Jim -- Do not meddle in the affairs of dragons, for you are crunchy and taste good with ketchup. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message