Re: [cobalt-users] spam

[Paul Warner <pwarner@xxxxxxxxxxxxxxxxxx>]

> Heya Folks,
>
> One of my domains on my raq has started to get *alot* of returned mail.
> I've checked the message headers and none of the mail was sent my box.
> The originating IP's appear lots of different DSL boxes in the uk/europe.
> Someone is sending out spam and the return path has my domain specified at
> the end.
>
> The problem is with all this mail is getting returned to me, it's eating
up
> my bandwidth needlessly, but I'm more worried about my IP getting
blacklisted !
> Is there a way to stop this ?
>
> I can't think of one seeing as the email is not originating from my
machine...
>
> Any ideas would be much appreciated.
> Thanks,
> Kam.
>

Kam-

Had this happen to me as well...if you can capture the stuff via an email
address, dump it to /dev/null.  If they're hitting a bunch, some sendmail
additions based on domain, etc may be able to do the trick.  When I was hit,
there were 3 mailings, each to a numeric username@xxxxxxxxxxxxxxxxx  Since I
had a few of these lying around, I managed to contact the company
represented in each to voice my displeasure...maybe it was coincidence and
the spammer moved on, maybe not, but the stuff stopped.  I sure don't like
having my inbox full of offers I'm not interested in...but I'm not militant
about snuffing them out, UNTIL someone pulls a stunt like this...then I
wanted spam-on-a-stick!

You can add a line like
'From:@offers4u.ru <tab> 550 Mail Rejected due to possible spam'
to your /etc/mail/access file or for the other scenario use
'To:812837@ <tab> 550 Mail Rejected due to possible spam'

Paul