On Tue, 25 Sep 2007 12:40:50 +0100, Craig Skinner wrote:
>RW wrote:
What I was getting looked like backscatter and smelled like backscatter
it is just that some of the IPs sending it didn't check out as MTAs.
i.e. they were not listed MXs for the domain they came from AND the
domain was not likely someone with separate outbound senders.
They all retried too and when I had them as TRAPPED entries the logged
data included typical failed-to-deliver messages.
>If the OP was repeatedly getting mail to a few addresses from different
My experience entirely. I trapped them by looking for <> as sender,
parsing the recipient as invalid (using a postfix lookup) and then
inserting the IP into spamdb as TRAPPED.
Later I firewalled them out for 24 hours. It cut the log clutter.
The scripts are still there but the crontab lines are commented out
until needed again.
R/
A consultant is someone who's called in when someone has painted himself into a corner. He's expected to levitate his client out of that corner.
-The Sayings of Chairman Morrow. 1984.
| Rafael J. Wysocki | 2.6.25-git1: Solid hang on HP nx6325 (64-bit) |
| Balbir Singh | Re: 2.6.24-rc8-mm1 |
| Greg KH | [GIT PATCH] driver core patches against 2.6.24 |
| Tarkan Erimer | Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3 |
git: | |
| David Miller | [GIT]: Networking |
| Gerrit Renker | [PATCH 15/37] dccp: Set per-connection CCIDs via socket options |
| Herbert Xu | Re: [PATCH] pkt_sched: Destroy gen estimators under rtnl_lock(). |
| Evgeniy Polyakov | Re: [BUG] New Kernel Bugs |
