RE: [cobalt-users] CPU heavily loaded, low on memory, smtp server not responding

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

> Date: Thu, 24 Jan 2002 10:32:59 -0500
> From: Brian Rahill <cobalt@xxxxxxxxxxxxxxxxxxxxxxx>

> I think webalizer was at least part of the problem.  Although I
> didn't see much suspicious activity in my maillog, I've
> finished updating my cgi scripts to close some potential spam
> holes.  So far so good.

Try running a box that does _only_ email.  Disallow relaying from
your webservers; they're now outside boxen just like the rest of
the Internet.  Use firewall rules at your border router (or on
your CGI/Web boxen) to allow mail transmission to your mailserver
only.

Now the CGI machines can only send mail to your mailserver.  But
the mailserver doesn't allow them to relay, meaning that all mail
must be sent to a domain hosted by your mailserver.

It's easier than tracking down each and every CGI script,
especially if you have customers installing their own local
copies.


Eddy

---------------------------------------------------------------------------
Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
---------------------------------------------------------------------------

Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.  Do NOT
send mail to <blacklist@xxxxxxxxx>, or you are likely to be blocked.