Recently, I've been seeing a fair number of spam messages that
have been sent to my majordomo address. They are sent from bogus
"From:" addresses, and since majordomo doesn't need Viagra, etc,
"he" replies with a long stream of error messages:
&squawk("Command '$cmd' not recognized.");
This message with every line parroted back as "not recognized" PLUS
the majordomo help text is then sent to the fake "From:" address,
and the isp, if it exists, sends it BACK to me complaining about
a non-existant user. As majordomo-owner, I get it in my inbox.
To put a stop to this, I modified majordomo in the following ways:
I added a threshold of 10 "not recognized" errors, which if exceeded
AND we have NOT SEEN ANY valid commands, the following actions take place:
1. Processing of the message is terminated.
2. The help text is not sent.
3. Instead of replying to the "sender", we send just send a short
note to majordomo-owner that says a message with > THRESHOLD errors was
found and a reply was NOT sent to "sender".
I'll be happy to make this code available in any way that is appropriate.
Bill Dudley
Follow-Ups:
|
|
