[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SLUG] Spam creaping through



On Fri, Jun 01, 2001 at 01:04:36PM +1000, Peter McCarthy wrote:
> Jun  1 13:04:19 mail sendmail[24597]: NAA24597: from=<>, size=33261, class=0,
> pri=63261, nrcpts=1, msgid=<200106010303.NAA24597@nospam.mail.asap.net.au>, proto=SMTP,
> relay=async116-syd-isp-236.nas.one.net.au [61.12.14.117]
> Jun  1 13:04:23 mail sendmail[24605]: NAA24597: to=<user@nospam.asap.net.au>,
> delay=00:00:34, xdelay=00:00:04, mailer=local, stat=Sent
> 
> This explains why it get past the filter, but no why sendmail doesn't
> automatically bin it as the send address does not reslove.

reason is (pasted from random google search)

MAIL FROM:<> is for bounce messages. Dont block them as this violates
RFC 1123
(and more to the point, will cause lots of us here to block your
mailserver).

> Any ideas on how I should attack this ?
Here's what I put in my .mc for that sort of stuff though
(get rid fo the >>> in front of From: just wanted to make the email sane
:)

LOCAL_CONFIG
## Custom configurations below (will be preserved)
Subject: $>CheckSubject
>>>From: $>CheckFrom

SCheckFrom
R$* haha@nospam.sexyfun.net $*    $#error $: 553 haha virus
R$*                                             $@nospam.OK

SCheckSubject
R$* Snowhite and the Seven Dwarfs $*    $#error $: 553 haha virus
R$* ILOVEYOU $*                 $#error         $: 553 ILOVEYOU virus
R$*                                             $@nospam.OK

But more to the point it's a virus and it'sprobably a good idea to check
incoming mail for viruses. Have a look at http://www.amavis.org
> 
> Also how do I specify the MaxMessageSize parameter to be a value using the
> sendmail.mc file ?
> 
define(`confMAX_MESSAGE_SIZE', `10000000')dnl
and don't forget to make it attatchment size *1.33 (I think that's the
rough ratio) ie a 1 meg attatchemtn creates a 1.3 M email due to
uuencoding etc

	b

-- 
John Ferlito
Senior Engineer - Bulletproof Networks
ph: +61 (0) 410 519 382
http://www.bulletproof.net.au/

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug