RE: [Exim] filter help

Top Page
Delete this message
Reply to this message
Author: Lewis Ashton
Date:  
To: Dave C., Tristan Aston
CC: exim-users
Subject: RE: [Exim] filter help
If you check the bounces, are you getting a common machine name as the
originator of the mail? As I stab in the dark I would expect that to be an
open relay. Check that out, contact the administrators of that IP address.
Maybe contact the administrators of a few of the bounce addresses and try to
trace the originator. Get that machine RBLed, and genrally hound the
administration of the originating site (if you are sure its not faked). Its
all, unfortunately, run of the mill type mail admin. But please do as much
as you can to track the culprit and don't just /dev/null the bounces,
because next week its going to be someone else on the list that has the same
problem caused by the same guy.

2p

Lewis

> -----Original Message-----
> From: Dave C. [mailto:djc@microwave.com]
> Sent: 28 June 2000 20:04
> To: Tristan Aston
> Cc: exim-users@???
> Subject: Re: [Exim] filter help
>
>
>
> I would contact a lawyer and arrange to extract lots of money from the
> nasty person. This person is guilty of forgery and denial of service.
>
> You could also look into setting receiver_verify, which will precnt
> your system from accepting message to <random>@yourdomain, assuming
> that <random> is not a valid account on your syste,
>
>
> On Wed, 28 Jun 2000, Tristan Aston wrote:
>
> > I'm running exim 3.14
> > I have a small problem,
> >
> > background:
> > A nasty person is sending huge ammounts of UBE to <random>@domains
> > they have set the message subject to be random, and the from
> > address is <random>@mydomain
> >
> > The main problem is that I'm now getting thousands
> > of bounces.
> > My initial thought was to discard these messages
> > based on the subject by testing for Undeliverable/failure etc..
> > Are any special headers added to a bounced message ?
> > if so what are they ?
> >
> > If anyone has any thoughts on this I'd would love to hear them
> > possible solutions especially :)
> >
> >
> > Tristan
> >
> > --
> > ## List details at

http://www.exim.org/mailman/listinfo/exim-users Exim details at
http://www.exim.org/ ##
>


--