[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Spam after mail to list



On Tuesday 06 January 2004 22:43, Hubertus Haniel wrote:
> On Tue, 6 Jan 2004, Philippe Vogel wrote:
> > Date: Tue, 6 Jan 2004 22:36:27 +0100
> > From: Philippe Vogel <filiaap@xxxxxxxxxx>
> > To: suse-security@xxxxxxxx

> > Here do I see from wich account this comes?

It's maillist@xxxxxxxxxxxxxxxxxxxx that is spamming. Just try to send 
an e-mail to that adress, and you'll see ;-)

>
> I have put that domain in my reject list but I am afraid it will propably
> not be of much use

Nope, but putting the IP 66.193.15.252 (promotionfactory.net) in a tarpit 
at least give me some childish satisfaction :

Jan  6 23:11:27 odin spamd[23902]: 66.193.15.252: <maillist@xxxxxxxxxxxxxxxxxxxx> -> <suselist@xxxxxxxxx>
Jan  6 23:23:47 odin spamd[23902]: 66.193.15.252: disconnected after 961 seconds.


As of a demo of the tarpit, you can try "telnet smtp.mumak.com 8025". 
The tarpit is the OpenBSD spamd daemon :

http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html

/Sigfred



-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here