From owner-freebsd-security Fri Feb 15 6:35:41 2002 Delivered-To: freebsd-security@freebsd.org Received: from mohegan.mohawk.net (mohegan.mohawk.net [63.66.68.21]) by hub.freebsd.org (Postfix) with ESMTP id 8647737B402 for ; Fri, 15 Feb 2002 06:35:04 -0800 (PST) Received: from mohegan.mohawk.net (mohegan.mohawk.net [63.66.68.21]) by mohegan.mohawk.net (8.11.4/8.11.3) with ESMTP id g1FEZ0D43721; Fri, 15 Feb 2002 09:35:00 -0500 (EST) Date: Fri, 15 Feb 2002 09:35:00 -0500 (EST) From: Ralph Huntington To: "William J. Petch" Cc: Subject: sendmail configs NOT a security issue In-Reply-To: <002001c1b579$eab38b70$4e00000a@twofour> Message-ID: <20020215093256.N34185-100000@mohegan.mohawk.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Gentlemen, This sendmail discussion is not a security issue; it's not even a FreeBSD issue. Please take it to an appropriate venue, e.g., comp.mail.sendmail Thank you On Thu, 14 Feb 2002, William J. Petch wrote: > I have been having a spam problem as well. I use ordb.org to block spam, > and have noticed a significant decrease in the amount of spam that comes to > my server. > > The problem I am having is I am only getting bounced spam. (And quite a lot > of it too.) The original messages are not being relayed, or even touching > my server. > I have a couple of excerpts of some email headers here... Our mail server's > name is mail.etherworx.com, and our server's class C is 216.58.72.xx. > > ***** > Received: from mail.etherworx.com (210.42.64.33 [210.42.64.33]) by > mailsrv.hbeeh.edu.cn with SMTP (Microsoft Exchange Internet Mail Service > Version 5.5.1960.3) > ***** > Received: from mail.etherworx.com (61.129.53.123 [61.129.53.123]) by > mail.ecepdi.stn.sh.cn with SMTP (Microsoft Exchange Internet Mail Service > Version 5.5.1960.3) > ***** > > These messages are being sent as Mark.Cella@etherlinx.ca (A domain that is > hosted on my server.) > > Clearly, these emails are not being routed through my servers. However, > whenever these spam mails bounce, they are coming back to > mail.etherworx.com. > I have no idea whatsoever as to how I can stop these... > > Anybody??? > > William J. Petch > System Administrator > EtherworX, Inc. > > ----- Original Message ----- > From: "Graham Rose" > To: > Sent: Thursday, February 14, 2002 12:05 PM > Subject: Re: sendmail ; bogus letters > > > > Add entries for the Open Relay Database (www.ordb.org & > > www.ordb.org/faq/#sendmail) and spamcop.net (www.spamcop.net) > > Configuring your mail server to use these lists of known spammers will > block > > most spam. I've noticed a 10 fold decrease on my mail server, with > thousands of > > spam blocked each day. > > Note: Setup instructions vary depending on the version of sendmail you > run. See > > above urls for details. > > > > -- > > Graham Rose > > Network Administrator > > Avalon InterConnect & Infotech Canada > > graham@infotechcanada.com > > graham@avint.net > > http://www.avint.net > > http://www.infotechcanada.com > > > > > > > > On Thu, 14 Feb 2002, Dave wrote: > > > Some of my accounts are getting some spam (what else is new on the > > > internet?). However, the "from" addresses of these letters are not even > > > valid (as is with a lot of spam). In a couple of cases they are, but I > > > question the letter actually came from the sender listed. > > > > > > Is there something I can do in the sendmail.cf file or other > configuration > > > change to drop these kinds of letters? Other solutions? > > > > > > I've thought of denying messages from free mail sites, but I imagine > some > > > spam is from elsewhere. I would think it is possible to ditch bulkmail, > I > > > know that yahoo.com has a bulkmail folder -- and I heard yahoo runs > > > FreeBSD too :) How are the letters discriminated from eachother as a > bulk > > > versus a possible real one? > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-security" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message