Date: Wed, 22 Sep 1999 13:13:10 -0700 From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca> To: Mike Tancsa <mike@sentex.net> Cc: "Mr. K." <bsd@a.servers.aozilla.com>, security@FreeBSD.ORG Subject: Re: Sendmail blocking of spammers (was Re: hackers?) Message-ID: <199909222013.NAA05832@passer.osg.gov.bc.ca> In-Reply-To: Your message of "Tue, 21 Sep 1999 15:39:05 EDT." <3.0.5.32.19990921153905.01499100@staff.sentex.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <3.0.5.32.19990921153905.01499100@staff.sentex.ca>, Mike
Tancsa writ
es:
> >I think I figured out what is happening. The relaying is indeed getting
> >denied, but unfortunately some of the spammers software is waiting blindly
> >for a positive response (and thus keeping a connection until they time
> >out). My choices seem to be ipfw (which I don't want to do as I don't
> >want to block all aol users), or somehow getting sendmail to disconnect on
> >a "relaying denied" (instead of sitting there until they timeout). I
> >can't figure out how to do the latter (doesn't seem to be possible). And
> >of course calling AOL and bitching, at least that will feel good if I can
> >get a bunch of these spammers booted.
>
> You have another option. If you have tcp_wrappers installed (its installed
> in all 3.[2|3] versions by default), you can deny by sub domain. The
> spammers are coming from *.ipt.aol.com. Block from that subdomain on. AOL
> for its mail exchangers are all of the form xx.mx.aol.com, not ipt.aol.com
> e.g.
> aol.com preference = 15, mail exchanger = zd.mx.aol.com
Or try the smtpd port.
Regards, Phone: (250)387-8437
Cy Schubert Fax: (250)387-5766
Open Systems Group Internet: Cy.Schubert@uumail.gov.bc.ca
ITSD Cy.Schubert@gems8.gov.bc.ca
Province of BC
"e**(i*pi)+1=0"
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199909222013.NAA05832>