Re: outgoing address compromised

On Tue, 21 Feb 2006 10:23 -0700, [email protected] wrote:

> I have 2 issues with the compromise of an outgoing email alias for one 
> of my groups.
>
> First, how could someone get that address? I have ,nobody after 
> grpname-outgoing in the list alias.

The addition of "nobody" to the alias ensures that "grpname-outgoing" 
doesn't appear in the message header, but you should examine a header to 
make sure it's working.  If not, check how you have the aliase set up, or 
post all your aliases for "grpname" here so we can see them.

> Second, how can I recover so my group members who have poor spam filters
> don't get the spam?

Assuming you are using sendmail as the MTA, put something like this in 
your virtusertable:

[email protected]     error:nouser User unknown

Substitute the actual listname and domain name, of course. Sendmail will 
then reject mail addressed to grpname-outgoing, but this will not stop the 
alias from working for resend.

-- 
Chip Old (Francis E. Old)             E-Mail:  [email protected]
BCPL Network Administrator            Phone:   410-887-6180
BCPL.NET Internet Services Manager    FAX:     410-887-2091
320 York Road
Towson, MD 21204-5179  US