[cobalt-users] Re: How to stop SPAM senders?

[Peter Frederick <pfred@xxxxxxxxx>]

On Mon, 5 May 2003 10:41:56 -0500, you wrote:

>I already had POP b4 SMTP turned on, and I am currently going through my
>logs.  Is there anything I should look for? 
>

Look for abnormal traffic patterns - lots of traffic from an outside IP
address to a bunch of different users 

You may find the Sendmail Log Analyser useful:

http://www.klake.org/sma

It can read the logfile and tell you about most active IP addresses, relays
errors etc.

Peter

>Mark
>
>
>-----Original Message-----
>From: wcstaff [mailto:wcstaff@xxxxxxxxxxxx] 
>Sent: Monday, May 05, 2003 10:27 AM
>To: cobalt-users@xxxxxxxxxxxxxxx
>Subject: Re: [cobalt-users] How to stop SPAM senders?
>
>
>
>
>> What is the easiest way to determine how or who is sending spanm 
>> through our server? We have gotten a report that someone is sending 
>> spam through our server but I am not sure how to stop them or how they
>
>> are getting in.
>>
>> Suggestions would be great
>>
>> Mark
>>
>I would first turn on pop b4 SMTP mail relaying. Then they will not (or
>at least it will limit) be able to send using your sendmial, without
>verification. I would check the sendmail logs.
>
>Tom
>
>_____________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>_____________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 
Peter Frederick
MIS Director, Indiana Packers Corp, Delphi IN
Phone: (765) 564-9705   Fax: (765) 564-3684
Work: pfred@xxxxxxxxx
Home: pjfred@xxxxxxxxxxxxx
============================================================================
'Tis better to light one candle than to curse the darkness a thousand times!