From owner-freebsd-isp Thu Jan 30 14:56:48 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id OAA07919 for isp-outgoing; Thu, 30 Jan 1997 14:56:48 -0800 (PST) Received: from intraserve.com ([204.174.32.131]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id OAA07913 for ; Thu, 30 Jan 1997 14:56:39 -0800 (PST) Message-Id: <199701302256.OAA07913@freefall.freebsd.org> Received: from [204.174.32.130] [204.174.32.130] by intraserve.com [204.174.32.131] with SMTP (MDaemon.v2.0.rW.b1.32-T) for ; Thu, 30 Jan 97 14:55:53 -0800 To: Peter Hawkins Subject: Re: Spam from rival Date: Thu, 30 Jan 97 14:59:47 -0500 From: X-Mailer: E-Mail Connection v3.1 CC: "freebsd-isp@freebsd.org" X-MDMail-Server: MDaemon v2.0 rW b1 32-T X-MDaemon-Deliver-To: freebsd-isp@freebsd.org Sender: owner-isp@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > From: Peter Hawkins \ Internet: (peter@clari.net.au) > > Subject: Spam from rival > > Today an New York based ISP spammed our entire customer base. The > culprits are:" Easyway Communications,Inc. (www.easyway.net) > > I sent them a bill for the delivery of the mail (which I'm sure they > will ignore) > a) what more can I do? > b) is it possible for us to treat such people by collectively routing > their IPs to lo0 ? > > Peter > -------- REPLY, End of original message -------- You may have allowed them to obtain most of your client's email addresses list by leaving in.fingerd in your inetd.conf file! I suggest you: A) "rem" it out of inetd.conf or B) use tcpd and block access via /etc/hosts.deny to all but "trusted" domains or. C) Filter TCP port 79 at your router. Remember the key question is: How did they get your client's addresses? The Finger daemon is your most likely cause. Try: finger @clari.net.au and see what you get. If you are running in.fingerd with the -w command you are telling the whole world alot more than they need to know about your system. Doug Woodward IntraServe Technologies Inc. New Westminster, B.C. Canada Email: dwoodward@intraserve.com Phone: (604) 521-0033 Fax: (604) 521-0403