At 01:42 PM 10/25/2004, sam@neuroflux.com wrote:
Agreed. Someone doing some vacation/out of office trolling would be nice.
> Will someone do something about this? Every time I post, I get error
> messages from weird places that I can do nothing about.
> --
>
> Begin forwarded message:
>
>> From: postmaster@imedia.fr
I block the entire imedia.fr domain because of this crud. If the site admin
over there can't learn to use envelope returns properly, I want no part of
mail coming from their servers. They are broken, and dangerous. Once I stop
seeing their barrage of misdirected bounces getting kicked off my server,
I'll stop rejecting them. Until then, I got 550's a plenty.
However, it would be nice if the snort-users list admin could track them
down and remove the offending addresses directly. This has been going on
for a long time, and it's getting silly.
In the interim might I suggest this bit from my /etc/mail/access file (for
sendmail):
mail.easynet.fr 550 mail systems with broken bounces
are not welcome here
postmaster@imedia.fr 550 mail systems with broken bounces
are not welcome here
212.180.1.138 550 mail systems with broken bounces
are not welcome here
212.180.1.136 550 mail systems with broken bounces
are not welcome here
Cleans up the problem real fast. Just run make on the directory after you
edit the file.
Same goes for ipadnet.com.br who are also doing the "bounce to from instead
of envelope" trick:
200.249.204.129 550 mail systems with broken bounces
are not welcome here
postmaster@ipadnet.com.br 550 mail systems with broken bounces
are not welcome here
The whole stunt is just as brilliant as spammers who try to spam
"DuhInvalid@evi-inc.com" (I've used it in examples before). Gee do you
think the address is valid?
-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
