Great Circle Associates Majordomo-Users
(February 2006)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: outgoing address compromised
From: karlp @ ourldsfamily . com
Date: Tue, 21 Feb 2006 13:31:25 -0700 (MST)
To: "Majordomo Users" <majordomo-users @ greatcircle . com>
Importance: Normal
In-reply-to: <Pine.GSO.4.62.0602211228240.20194@mail>
References: <37724.207.173.117.242.1140542636.squirrel@ourldsfamily.com> <Pine.GSO.4.62.0602211228240.20194@mail>
User-agent: SquirrelMail/1.4.4-rc1

On Tue, February 21, 2006 10:38 am, Chip Old said:
> On Tue, 21 Feb 2006 10:23 -0700, karlp@ourldsfamily.com wrote:
>
>> I have 2 issues with the compromise of an outgoing email alias for one
>> of my groups.
>>
>> First, how could someone get that address? I have ,nobody after
>> grpname-outgoing in the list alias.
>
> The addition of "nobody" to the alias ensures that "grpname-outgoing"
> doesn't appear in the message header, but you should examine a header to
> make sure it's working.  If not, check how you have the aliase set up, or
> post all your aliases for "grpname" here so we can see them.

I have over 100 groups and none of the others have this problem. This is one
of the older groups and there was a time when I didn't have ,nobody set up.

>
>> Second, how can I recover so my group members who have poor spam filters
>> don't get the spam?
>
> Assuming you are using sendmail as the MTA, put something like this in
> your virtusertable:
>
> grpname-outgoing@domain.tld     error:nouser User unknown
>
> Substitute the actual listname and domain name, of course. Sendmail will
> then reject mail addressed to grpname-outgoing, but this will not stop the
> alias from working for resend.

Awesome! I can't believe I didn't think of that. Actually I can...

THANKS!

Karl


>
> --
> Chip Old (Francis E. Old)             E-Mail:  fold@bcpl.net
> BCPL Network Administrator            Phone:   410-887-6180
> BCPL.NET Internet Services Manager    FAX:     410-887-2091
> 320 York Road
> Towson, MD 21204-5179  US
>





References:
Indexed By Date Previous: Re: outgoing address compromised
From: Chip Old <fold@bcpl.net>
Next: Re: outgoing address compromised
From: karlp@ourldsfamily.com
Indexed By Thread Previous: Re: outgoing address compromised
From: Chip Old <fold@bcpl.net>
Next: Re: outgoing address compromised
From: karlp@ourldsfamily.com