Re: Majordomo and spammers

"Tom Patterson" <[email protected]> Sat, 12 Jul 2008 04:46:51 -0500
Newsgroups gmane.mail.majordomo.general
Message-ID <039001c8e404$3623b110$6400a8c0@DESKTOPPRO>
Still sorry All,

Dan replied to my last response, which I also answered.  Both are below:
________________

The more important point of my post, was to modify line 176 of the
"digest" script so you don't have to run an external script
to renumber the files in the $digest_work directory.

As for the problem starting after moving to a new server, have you
carefully examined all the ownerships and permissions of
all the files and directories associated with majordomo AND your MTA?
Is selinux involved?  What about smrsh if you are
running sendmail?

Dan Liston

Ok,  The linux is Fedora 8.  Qmail is the mail program.

-Tom
____________________

----- Original Message ----- 
From: "Ed Kasky" <[email protected]>
To: "Daniel Liston" <[email protected]>; <[email protected]>
Sent: Saturday, July 12, 2008 1:03 AM
Subject: Re: Majordomo and spammers


> FYI, demime also strips attachments at the same time that it strips the 
> mime from a message.  I have lots of subscribers scratching their heads on 
> that one...
>
> Ed
>
> At 03:58 PM Friday, 7/11/2008, Daniel Liston wrote -=>
>>I have a sneaky suspicion that your spam may be graphical in nature, where 
>>there is no body content, just an attached graphic.
>>Demime removes the HTML content, leaving an empty message (just assuming 
>>here), before your aliases file passes the
>>converted message to your -outgoing alias where the digest script is 
>>called.  You are probably creating your own problem in
>>this case.
>>
>>As for the sequentiality of your pre-digest files, I have seen this too, 
>>in some cases.  The solution is another patch...  I offer
>>this piece of an email that I sent in September of 2003.
>>
>>>Do the timestamps on the digest.$$ messages coincide with times that
>>>email was received for your list?  Have you looked in the
>>>$digest_work_dir
>>>to see what files are queued up in there?  Are there any skipped
>>>numbers in the sequence of files?  You might need to modify line
>>>#176 of the digest script to say
>>>
>>>          foreach (sort @files) {
>>>
>>>to clean things up.  You might also consider creating a tmp directory
>>>in the majordomo $HOME (or work directory if they are different) with
>>>the proper majordomo ownership and permission, then setting $TMPDIR in
>>>the majordomo.cf to use that directory.
>>In fact, I found reference to the same change on line 176 of digest in a 
>>posting from Sept 2000 too.
>>
>>Dan Liston
>>
>>Tom Patterson wrote:
>>>Thanks to Joe for help on this problem.  The patch immediately cut out 
>>>the messages which were bouncing back to me due to the use of invalid 
>>>e-mail addresses by the spammers.
>>>
>>>I am however left with the problem that majordomo is still picking up on 
>>>the spam messages and creating zero content messages in the digest 
>>>folder.  When the digest is created, it then shows these messages, albeit 
>>>as blank.
>>>
>>>I have a script which deletes all zero content messages in the digest 
>>>folder immediately before the mkdigest command is issued by a cron job. 
>>>The problem then arises that the remaining messages are not sequentially 
>>>numbered in the digest folder, and do not all get picked up by the 
>>>digest. I can get around this problem by renumbering the messages, 
>>>starting from zero.
>>>
>>>Also, I have two lists.  Only the list starting with the letter "s" is 
>>>picking up the blank messages.  The list starting with the letter "v" 
>>>does not pick up blank messages.
>>>
>>>As the spam is addressed to majordomo@domainname, I assume that majordomo 
>>>is dumping the blank messages into the first folder he comes to.  I also 
>>>assume that if I created a dummy list starting with a alpha character 
>>>prior to "s", the zero messages would end up there, leaving my list 
>>>folders unaffected by the spam.  I will try this next.
>>>
>>>However, is there some way to prevent majordomo from creating these zero 
>>>content messages?
>>>
>>>-Tom
>>>
>>>----- Original Message ----- From: "Joe R. Jah" 
>>><[email protected]>
>>>To: "Tom Patterson" <[email protected]>
>>>Cc: <[email protected]>
>>>Sent: Wednesday, July 09, 2008 9:51 PM
>>>Subject: Re: Majordomo and spammers
>>>
>>>
>>>>On Wed, 9 Jul 2008, Tom Patterson wrote:
>>>>
>>>>>Date: Wed, 9 Jul 2008 06:04:38 -0500
>>>>>From: Tom Patterson <[email protected]>
>>>>>To: [email protected]
>>>>>Subject: Majordomo and spammers
>>>>>
>>>>>I have recently moved my site to a new server using Q Mail, and 
>>>>>reinstalled Majordomo.  I am having two problems.
>>>>>
>>>>>1.  I am getting hit with a great amount of spam addressed to 
>>>>>majordomo, which is generating replies to non-existent addresses, which 
>>>>>in turn bounce back to me.  The replies are the standard reply from 
>>>>>majordomo when it does not understand a message.
>>>>>      Is there any way of stopping these replies from Majordomo or of 
>>>>> changing the majordomo's address from [email protected]?
>>>>>
>>>>>2.  All of these spam messages to majordomo are generating zero content 
>>>>>messages in the digest folder, which in turn, adds blank messages to 
>>>>>the digest.  How can this be fixed?
>>>>>
>>>>>-Tom
>