Re: outgoing address compromised

"Peter A. Chapman" <[email protected]>
Newsgroups gmane.mail.majordomo.general
Message-ID <[email protected]>
I'm confused.  If test-outgoing is aliased to /dev/null rather than include:/usr/local/majordomo/lists/test won't all e-mail messages sent to the test majordomo mailing list be sent to the big trash can in the sky?  How does a legitimate e-mail message get distributed to the mailing list rather than forwarded to junkmaster?  I've never used postfix.  Is postfix able to flag messages sent to test-outgoing that don't originate from test?  

-------

At 01:37 PM 8/1/2007, Chris Knowles wrote:
>I recently discovered that some viruses had harvested the list-outgoing
>address from some of my mailing lists.
>
>After searching the majordomo-users archive I found others who had
>encountered similar problems.
>
>I'm running majordomo-1.94.5 with postfix so the sendmail solutions didn't
>work for me.
>Though the concept does translate.
>
>The messages are typically using forged headers with return-mail addresses
>of innocent
>3rd parties. Instead of trying to direct the message via an "error: nouser
>User unknown" bounce to
>the innocent 3rd party, I elected to create a canonical recipient map table
>containing
>all of the <list>-outgoing aliases on my server (over 30) and redirect them
>to "junkmaster".
>This user is then aliased to /dev/null. This way the viruses/spam sent
>directly to the list are quietly dropped.
>
>In my main.cf file I added the line:
>
>        recipient_canonical_maps = hash:/etc/postfix/recipient_canonical_map
>
>and recipient_canonical_map contains lines similar to the following:
>
>        # canonical names to redirect messages sent directly to
>"list-outgoing"
>        #
>        test-outgoing   junkmaster
>        staff-outgoing  junkmaster
>        parttime-outgoing       junkmaster
>
>This list is then compiled using the postmap command
>
>/etc/aliases entry is:
>
>        #
>        # Junk messages that are sent to <list>-outgoing
>        junkmaster:             /dev/null
>
>I hope this is useful to others who encounter this problem.
>
>Chris Knowles
>Redeemer University College
>Ancaster, Ontario Canada
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.