Great Circle Associates Majordomo-Users
(October 2003)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: spammed using list-outgoing address
From: Jeff Wasilko <jeffw @ smoe . org>
Date: Wed, 22 Oct 2003 12:24:44 -0400
To: Bill Fant <bfant @ charm . net>
Cc: majordomo-users @ greatcircle . com
In-reply-to: <20031022120447.Q73866@fellspt.charm.net>
Mail-followup-to: Bill Fant <bfant@charm.net>,majordomo-users@greatcircle.com
References: <20031022120447.Q73866@fellspt.charm.net>
User-agent: Mutt/1.3.99i

On Wed, Oct 22, 2003 at 12:13:07PM -0400, Bill Fant wrote:
> My list has been spammed, for the first time, by someone using the
> list-outgoing address. I have read the FAQ, and before attempting any of
> the prescriptions (other than restrict_post), I tried one that was not
> mentioned -- using the regexp /^to.*listname-outgoing/ in taboo header.
> This did *not* prevent a test email, from me to listname-outgoing, from
> going directly to the list.
> 
> So, with thanks in advance, I am wondering if I have the regexp wrong, or
> if this solution does not work for other reasons.

Majodomo has nothing to do with the -outgoing address, so you
can't use majordomo to keep people from sending mail to it.

I added some rules to sendmail to block outside access to
-outgoing and it's worked well. Here's the rules to drop into
your .mc file:

(note that if you copy & paste these, the LHS/RHS need to be
separated by tabs, not spaces)

LOCAL_CONFIG
Koutgoing regex -a@MATCH \-outgoing$

LOCAL_RULESETS
SLocal_check_rcpt
# kill attempts to send directly to majordomo's -outgoing aliases
R$*				$:$&{client_addr}<>$1
R127.0.0.1<>$*			$@ LOCALMAILISOK
R$*<>$*				$:$2
R$*				$: <> $>Parse0 $>3 $1
R <> $+ < @ $=w . >		$: $(outgoing $1 $)
R <> < @ $=w . > : $+		$: $(outgoing $2 $)
R <> $* < @ $* > $*		$: NOMATCH
R <> $+				$: $(outgoing $1 $)
R@MATCH				$#error $: 550 Do not use -outgoing address




Follow-Ups:
References:
Indexed By Date Previous: Re: spammed using list-outgoing address
From: John Sechrest <sechrest@peak.org>
Next: Re: spammed using list-outgoing address
From: John Heffernan <jheffernan@collaborative.org>
Indexed By Thread Previous: Re: spammed using list-outgoing address
From: John Sechrest <sechrest@peak.org>
Next: Re: spammed using list-outgoing address
From: John Heffernan <jheffernan@collaborative.org>

Google
 
Search Internet Search www.greatcircle.com