Re: [EXIM] New spammer relay trick

Top Page
Delete this message
Reply to this message
Author: Elliot Finley
Date:  
To: Pete Ashdown
CC: exim-users
Subject: Re: [EXIM] New spammer relay trick
Pete,
     This is from the configure.sample file that *I think* comes with exim.  I
got mine from FreeBSD ports, so I can't be sure.


# If you want Exim to support the "percent hack" for all your local domains,
# uncomment the following line. This is the feature by which mail addressed
# to x%y@z (where z is one of your local domains) is locally rerouted to
# x@y and sent on. Otherwise x%y is treated as an ordinary local part.

# percent_hack_domains=*


On Tue, 12 Jan 1999 13:53:02 -0700 (MST), you wrote:

>We got hit with this one the other day. We have several mail servers here,
>all of them have relaying shut off. Of course, there are exceptions to the
>relay rules which allows mail to flow normally. Mail can come in from
>anywhere to a set list of inside networks and servers, mail can go out to
>anywhere if it originates from inside the network.
>
>I'm guessing that the spammer used the
> user%targetdomain.com@??? addressing form in order to get
>mail1.domain.com to hand off to mail2.domain.com and do their dirty work.
>This is my guess, since the headers only showed the path going from the
>outside, to one mail server, then to another, then out to a target. I
>can't find any documentation as to whether Exim supports the "%" form of
>addressing.
>
>Any good ideas how to fight this? If possible, I'd just like to shut off
>the "%" addressing altogether.


-- 
     Later
        Science (efinley@???)


--
*** Exim information can be found at http://www.exim.org/ ***