Great Circle Associates Majordomo-Users
(October 2003)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: spammed using list-outgoing address
From: John Sechrest <sechrest @ peak . org>
Date: Wed, 22 Oct 2003 09:20:20 -0700
To: Bill Fant <bfant @ charm . net>
Cc: majordomo-users @ greatcircle . com
In-reply-to: Your message of Wed, 22 Oct 2003 12:13:07 EDT. <20031022120447.Q73866@fellspt.charm.net>


If the spammer uses the outgoing alias directly, then 
it never touches the majordomo program, and the mail program
is just looking at a regular alias.

The step that would be wise is to put some kind of hash key
in the name of eash outgoing alias:

foo: .... majordomo..... foo-outgoing-asfdj23991
foo-outgoing-asfdj23991: Include .... 

This asfdj23991 is really security by obscurity. It is not real
security. But since you have to log on to the server to find
the key, 99% of your spammers will not see the key and will not
be able to find it.


   

Bill Fant <bfant@charm.net> writes:

 % My list has been spammed, for the first time, by someone using the
 % list-outgoing address. I have read the FAQ, and before attempting any of
 % the prescriptions (other than restrict_post), I tried one that was not
 % mentioned -- using the regexp /^to.*listname-outgoing/ in taboo header.
 % This did *not* prevent a test email, from me to listname-outgoing, from
 % going directly to the list.
 % 
 % So, with thanks in advance, I am wondering if I have the regexp wrong, or
 % if this solution does not work for other reasons.
 % 
 % Bill Fant

-----
John Sechrest          .         Helping people use
CTO PEAK -              .           computers and the Internet
Public Electronic         .            more effectively
Access to Knowledge,Inc       .                      
1600 SW Western, Suite 180       .            Internet: sechrest@peak.org
Corvallis Oregon 97333               .                  (541) 754-7325
                                            . http://www.peak.org/~sechrest


References:
Indexed By Date Previous: spammed using list-outgoing address
From: Bill Fant <bfant@charm.net>
Next: Re: spammed using list-outgoing address
From: Jeff Wasilko <jeffw@smoe.org>
Indexed By Thread Previous: spammed using list-outgoing address
From: Bill Fant <bfant@charm.net>
Next: Re: spammed using list-outgoing address
From: Jeff Wasilko <jeffw@smoe.org>

Google
 
Search Internet Search www.greatcircle.com