RE: [cobalt-users] RaQXTR - Help! Being spammed into next week

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> 
> Is there anything I can do, short of switching mail off at 
> server level (not an option with so many paying customers and 
> other domains on it) to minimise the impact?
> 

Are all the attempts coming from the same IP? Block that IP either in
access, (not sure how this works on the XTR, or by entering as root:
/sbin/route add -host 12.34.56.789 reject

 12.34.56.789 being the IP.

It's also possible that all the attempts carry the same reply address
like joe@xxxxxxxxxxx which you can block.
Run the offending IPs through http://openrbl.org/ or
http://relays.osirusoft.com/cgi-bin/rbcheck.cgi which may give you the
incentive to set up Sendmail to use one of the block lists like SPEWS or
Spamcop or Spamhaus.

-- 
C2002 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.