OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: How Stop Image Spam

From: /dev/rob0 (rob0gmx.co.uk)
Date: Fri Aug 25 2006 - 14:24:11 CDT


On Friday 25 August 2006 14:03, Dick Middleton wrote:
> Jeff Noxon wrote:
> > On Fri, August 25, 2006 1:25 pm, Coffey, Neal wrote:
> >> You really should be blocking "friend" in a helo_access table.
> >
> > That is a good catch. I could have blocked 5,322 messages in the
> > last month with that check.

### added 2006/03/20
/^friend$/ 503 5.7.1 You are not MY friend.

> reject_non_fqdn_hostname
>
> will do that and lots of others for you

reject_non_fqdn_helo_hostname in 2.3+, and relatively safe these days,
although more conservative admins might not want to risk it.

> Jim Seymour's "Postfix Anti-UCE Cheat Sheet" has useful ideas for
> blocking the usual suspects.
>
> http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt

And yes, that was my point in posting to this thread. Rather silly to
get into OCR of images, when you could have turned them away before
DATA. No images to OCR. :)
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header