Re: proposed solution for spam sent to majordomo@yourdomain

In response to one (1) request, I've put my modified version of
majordomo 1.94.5 up here:

http://www.casano.com/majordomo/index.html

Both the perl module itself and the diffs from the production version
are available there.

Please test this before you go and install it on a server that has
a jillion customers depending upon it.  I wouldn't want to be held
responsible for anybody's lost email.

Bill Dudley

> From [email protected] Thu Jul  7 13:32:08 2005
> Date: Thu, 7 Jul 2005 13:31:45 -0400 (EDT)
> From: "William Dudley Jr." <[email protected]>
> To: [email protected]
> Subject: proposed solution for spam sent to majordomo@yourdomain
>
> Recently, I've been seeing a fair number of spam messages that
> have been sent to my majordomo address.  They are sent from bogus
> "From:" addresses, and since majordomo doesn't need Viagra, etc,
> "he" replies with a long stream of error messages:
>
> &squawk("Command '$cmd' not recognized.");
>
> This message with every line parroted back as "not recognized" PLUS
> the majordomo help text is then sent to the fake "From:" address,
> and the isp, if it exists, sends it BACK to me complaining about
> a non-existant user.  As majordomo-owner, I get it in my inbox.
>
> To put a stop to this, I modified majordomo in the following ways:
>
> I added a threshold of 10 "not recognized" errors, which if exceeded
> AND we have NOT SEEN ANY valid commands, the following actions take place:
>
> 1. Processing of the message is terminated.
>
> 2. The help text is not sent.
>
> 3. Instead of replying to the "sender", we send just send a short
> note to majordomo-owner that says a message with > THRESHOLD errors was
> found and a reply was NOT sent to "sender".
>
> I'll be happy to make this code available in any way that is appropriate.
>
> Bill Dudley
>
> !DSPAM:42cd6718498858384116375!
>
>