Date: Thu, 21 Jun 2001 18:08:35 +0300 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: faSty <fasty@i-sphere.com> Cc: "Bruce M. Walker" <bmw@borderware.com>, freebsd-security@FreeBSD.ORG Subject: Re: need help filter this stupid virus. Sendmail didnt stop this. Message-ID: <20010621180835.A11041@hades.hell.gr> In-Reply-To: <20010620165335.C20771@i-sphere.com>; from fasty@i-sphere.com on Wed, Jun 20, 2001 at 04:53:35PM -0700 References: <20010620194713.A18467@ns1.via-net-works.net.ar> <200106202329.f5KNTPm07958@fusion.borderware.com> <20010620165335.C20771@i-sphere.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jun 20, 2001 at 04:53:35PM -0700, faSty wrote: > I did used "From:hahaha@sexyfun.net" and still fails reject it. > > -trev Instead of tweaking your sendmail rules, which is somewhat error prone (unless you reallyknow what you are doing), you could install procmail and use that as the local delivery agent. Then, a simple filter like: :0 H * From[: ].*hahaha@.*sex.*$ /dev/null put in the proper place (your /usr/local/etc/procmailrc) will filter out all mail that have either an envelope-from or a header-from address that matches your rules. The only problem I can see with this is that you might soon end up with a huge /usr/local/etc/procmailrc file, instead of a nicer /etc/mail/access file that blocks spammers. If you do want to use /etc/mail/access then you should probably do the extra works it takes to find from the mail headers, where the mail comes from. Then block the mail that comes from that host or domain or provider and contact the provider's mail admins informing them that you have blocked the entire domain because spammers use it to abuse your mail system. A nicely put and carefully worded telephone call, where you take care not to offend the mail admins themselves, will do wonders.. trust me. -giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010621180835.A11041>