From owner-freebsd-questions@FreeBSD.ORG Mon Apr 26 15:05:00 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AEAC0106564A for ; Mon, 26 Apr 2010 15:05:00 +0000 (UTC) (envelope-from eitanadlerlist@gmail.com) Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.27]) by mx1.freebsd.org (Postfix) with ESMTP id 3AC708FC20 for ; Mon, 26 Apr 2010 15:04:59 +0000 (UTC) Received: by ey-out-2122.google.com with SMTP id d26so796703eyd.9 for ; Mon, 26 Apr 2010 08:04:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:received:in-reply-to :references:from:date:message-id:subject:to:cc:content-type; bh=IFTsfQHNREDf85V39ywrMUiX9vJjLQ9BfUonNr1Pnq4=; b=iXHQe5dBeGNItDLsQMBvTdfRSDHJyuoPX5/XuDJ6GuB2PEBxKUCVH/kxeGSZ6lnbau bqnsbn0s1L7jmj9imrl1Dvb2aH38lPt+fqelapo7l2+qhqA+/AjToHFvI0FZwaEJC8m3 Unf1RXjNYQ2Nf9cpXZzdFa/1gk97rs65o5sRE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=e6X/jUp7d+WpU+QEAOpjRsu35T6N0i2Ej+tRtmI+4w+HW7JBPqz32PUeYkxxr0VOUP AtRhvxMYyodsoVvxLz14Exf/3MWxvayC/6F09bOMXRc75rMzA1r2nXHtqTmiOI5R1lm9 gshwQorDT9fVKIzkOrmO88SLH+u4BBUcENjWA= Received: by 10.239.135.74 with SMTP id c10mr359339hbc.108.1272294294140; Mon, 26 Apr 2010 08:04:54 -0700 (PDT) MIME-Version: 1.0 Received: by 10.239.193.77 with HTTP; Mon, 26 Apr 2010 08:04:33 -0700 (PDT) In-Reply-To: <20100426143510.GA75532@elwood.starfire.mn.org> References: <4BD3E9B8.2030109@comclark.com> <20100426124453.GB74442@elwood.starfire.mn.org> <20100426143510.GA75532@elwood.starfire.mn.org> From: Eitan Adler Date: Mon, 26 Apr 2010 18:04:33 +0300 Message-ID: To: John Content-Type: text/plain; charset=UTF-8 Cc: Aiza , FreeBSD Questions Subject: Re: Wpoison????? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Apr 2010 15:05:00 -0000 >> There are better systems that have a pure honeypot which actually >> accepts mail (and add the IPs that send mail to a blacklist) > > OK - where do we find one of THOSE? I have never researched this topic in depth but http://en.wikipedia.org/wiki/Honeypot_%28computing%29#Further_reading_and_external_links seems to have some links. Setting one up on your own isn't hard. Just create a new mail account and blacklist anyone who sends mail to that account.