Re: [cobalt-users] Email Trap ( Tripwire?) block spammers

[flash22@xxxxxxx]

On Mon, 18 Feb 2002, Bill Gunning wrote:

> 
> I would like to setup 4 or 5 email addresses for spamers to find
> like bob@xxxxxxxxxx & tom@xxxxxxxxxx then if someone uses these
> addresses my RaQ would add them to a block list with the time &
> email used... And would not receive any email at all from 
> the sending email server...

It's too simplistic, you will end up blocking smarthosts, and a good chunk
of the net afterwards, and i find that most of the relay spam rarely has
any coincidence in a single run, sometimes, but usually not, the spammers
regularly feed multiple machines at the same time

> 
> Has anyone tried something like this? And what would be involved?
> Procmail? Tripwire? 

procmail and a script to add it to the access file, but you really don't
want to ;P

Also, you are going to create a removel headache as big as what you have
deciding to add people, and you won't catch the stupid machines that retry
delivery failures by resending from backup MX's (contrary to rfc's)

Lots of other folks are already running traps, take advantage, use the
RBL's ;)

gsh