Re: Spam-flood attack on open-source hosting domains?

From: Alan Connor (xxxxxx_at_xxxx.xxx)
Date: 08/20/03


Date: Wed, 20 Aug 2003 06:30:48 GMT

On Wed, 20 Aug 2003 06:43:29 GMT, Peter Schaffter <peter@faustus.debian.org> wrote:
>
>
> On Tue, 19 Aug 2003 23:37:58 -0500, Dave Uhring wrote:
>> On Wed, 20 Aug 2003 05:34:03 +0000, Peter Schaffter wrote:
>>
>> > Hi!
>> >
>> > Today, I started getting flooded with spam. Seriously flooded. 75
>> > to 100 per hour.
>>
>> And what do the headers tell you?
>
> I wouldn't know. Everything spam either gets deleted at my ISP (via
> mailfilter rules) or consigned to /dev/null via procmail.

Have procmail save the headers:

:0hc:${HOME}/.spam.lock
| cat >> ~/spamheaders

at the top of your ~/.procmailrc. It won't interfere with anything below it.

If you send them to a (mbox) mailbox instead, you can use your mail client to
look them over.

Alan C



Relevant Pages

  • Re: Need antispam software - mysterious spam encountered
    ... especially with respect to spam that ALWAYS has fake headers. ... >communication or transaction or payment for the ink. ... Has your ISP address ever been seen on the Internet ANYWHERE? ...
    (alt.computer.security)
  • Re: Need antispam software - mysterious spam encountered
    ... > especially with respect to spam that ALWAYS has fake headers. ... >>communication or transaction or payment for the ink. ... > Has your ISP address ever been seen on the Internet ANYWHERE? ...
    (alt.computer.security)
  • Re: Cant copy "Message Source" area ?
    ... Forwarding the full message to ISP ... analyze the contents of Spam email, ... Microsoft Online Partner Support ... The people designing the filters want to see the full headers ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Junk Email - Obvious SPAM being overlooked
    ... The RFCs do not define what constitutes SPAM. ... The actual routing of the email is indeed included in the message headers. ... Now, while it is true that I am a single recipient of the email, I own my ... filter them out, and certainly *not* harmful. ...
    (microsoft.public.outlook)
  • Re: Cant copy "Message Source" area ?
    ... You were saying that you knew that that is what you should be able to do to capture headers but were unable to for some reason. ... into the spam for the ISP to block them? ... BTW have you misunderstood Sean Wu's second tip about using ... If your ISP would accept that it would be ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)