Great Circle Associates Majordomo-Users
(May 2006)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Majordomo spam problem
From: "Steven W. Orr" <steveo @ syslang . net>
Organization: SysLang
Date: Tue, 23 May 2006 13:22:48 -0400 (EDT)
To: Michael Wilkinson <mike @ towerravens . com>
Cc: majordomo-users @ greatcircle . com
In-reply-to: <20060523013734.GA1527@pox.towerravens.com>
References: <20060523013734.GA1527@pox.towerravens.com>

On Monday, May 22nd 2006 at 19:37 -0600, quoth Michael Wilkinson:

=>I've been a LONG time user/admin of majordomo, and I've recently
=>experienced something I'm not sure what to do about or how to
=>combat.
=>
=>I'm using majordomo 1.94.5, and sendmail 8.13.4, somehow evil spammers
=>used my majordomo mail alias to relay spam through my sendmail server.
=>It was a mess, I had to clean out my domain/ip from some blackhole
=>lists.
=>
=>I picked up on it because I got quite a few majordomo abort messages.
=>I've been trying to dissect how they used it exactly, unfortunately,
=>I don't have my sendmail logs for that time period anymore.
=>
=>I was able to stop it by commenting my majordomo mail alias out of
=>my aliases file. I was wondering if any here has seen anything like
=>this, and if so, how I may prevent the problem in the future.
=>
=>Thanks!
=>-Mike

Other people are giving you answers that relate to controlling relay 
problems and general tightening up of the sendmail config. The most 
obvious answer is to not allow any postings to your lists unless the 
poster is a subscriber to that list.

-- 
steveo at syslang dot net TMMP1 http://frambors.syslang.net/
Do you have neighbors who are not frambors?


Follow-Ups:
References:
Indexed By Date Previous: Re: Majordomo spam problem
From: Daniel Liston <dliston@sonny.org>
Next: Re: Majordomo spam problem
From: "Roger B.A. Klorese" <rogerk@queernet.org>
Indexed By Thread Previous: Re: Majordomo spam problem
From: Ed Kasky <ed@esson.net>
Next: Re: Majordomo spam problem
From: "Roger B.A. Klorese" <rogerk@queernet.org>