OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Bots - SPAM - Attacking our mail server

From: Adam D (emlistsgmail.com)
Date: Mon Aug 20 2007 - 17:43:02 CDT


Wietse Venema wrote:
> Adam D:
> [ Charset ISO-8859-1 unsupported, converting... ]
>
>> Hello list,
>>
>> I have noticed a very large (over 2-5.5k+...) emails in one day, since
>> Friday, being sent to the same, SPAMer created, non existent account.
>> The logs are showing the SPAM/Virus being rejected for these reasons:
>>
>> Helo command rejected: Host not found; from=<> from=<>
>> to=<jicdomainfeldomain.tld>
>> Client host rejected: cannot find your hostname [...] from=<>
>> to=<jicdomainfeldomain.tld>
>>
>
> These are MAILER-DAEMON messages from remote systems, also called
> backscatter.
>
> See http://www.postfix.org/BACKSCATTER_README.html for ways to
> mitigate the flood.
>
> Wietse
>
Thank you you all.

I added those rules to our domains and all ready implanted the nolisting
technique to the site. All very great ideas. I am all ready looking
forward to the reduced SPAM and backscatter.

-Adam