RE: [Nolug] spam methods !!

> Yes, I use sendmail.
> Could you tell me more about this "checkcompat"?
>
> P
>

Actually, after looking into it, check_rcpt is probably more appropriate
for what you want to do.

From:

http://www.busan.edu/~nic/networking/sendmail/ch29_10.htm#SML2-CH-29-SECT-10-4

"The RCPT command in the SMTP dialogue specifies an envelope recipient's
address:

RCPT To: <recipient@host.domain>

If the check_rcpt rule set exists, it is called immediately after the RCPT
command is read. The workspace that is passed to check_rcpt is the address
following the colon. The envelope recipient address may or may not be
surrounded by angle brackets and may or may not have other RFC822 comments
associated with it.

To illustrate one use for the check_rcpt rule set, consider the need to
reject all incoming mail destined for the recipient named fax. One method
might look like this:

R$* $: $>3 $1 focus on host
R$* <@ $~w > $* $@ ok not @ourhost is okay
R$* <@ $+ > $* $: $1 discard host
Rfax $#error $@ 5.1.3 $: "cannot send mail to fax"

Here, we first call rule set 3 to focus on the host part of the address
and normalize it. The second rule accepts anything that is addressed to
any host but our own. That way, mail to fax@another.host will work. The
third rule discards the host (our local) part of the address. In the
fourth line the remaining user part is compared to the name fax. Any mail
to fax is thus rejected:

RCPT To: <fax@ourhost>
553 <fax@ourhost>... cannot send mail to fax
"

>> -----Original Message-----
>> From: owner-nolug@joeykelly.net [mailto:owner-nolug@joeykelly.net]On
>> Behalf Of Randy Flood
>> Sent: Tuesday, November 18, 2003 6:18 PM
>> To: nolug@joeykelly.net
>> Subject: RE: [Nolug] spam methods !!
>>
>>
>>
>> What mail server are you using? You could probably do something with
>> the
>> checkcompat stuff in sendmail.
>>
>>
>>
>>
>>
>> > Hi,
>> >
>> > Does anybody know how to stop spam that comes in the following form.
>> >
>> > This was in To: field
>> >
>> > \int00041.txt@server.myserver.com, \int00036.txt@server.myserver.com,
>> > \int00037.txt@server.myserver.com, \int00038.txt@server.myserver.com,
>> > \int00039.txt@server.myserver.com, \int00040.txt@server.myserver.com
>> >
>> > By stopping I mean, not even let connect/use the mailserver.
>> >
>> > Content itself was detected as spam by spamassassin, however it would
>> > still be a waste to download this and process at home.
>> >
>> > There was a procmail rule with spamassassin to discard spam messages
>> on
>> > the server, but unfortunately that rule did not do anything.
>> >
>> > P
>> >
>>
>> ___________________
>> Nolug mailing list
>> nolug@nolug.org
> ___________________
> Nolug mailing list
> nolug@nolug.org
>

___________________
Nolug mailing list
nolug@nolug.org
Received on 11/18/03