[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: MS mail bombs



Arnt Karlsen(arnt@c2i.net) is reported to have said:
> On Tue, 23 Sep 2003 10:11:48 -0500, 
> John Hasler <john@dhh.gt.org> wrote in message 
> <[🔎] 87k77ztu8b.fsf@toncho.dhh.gt.org>:
> 
> > Wayne writes:
> > > With fetchmail and mailfilter, it is.
> > 
> > It is possible with fetchmail alone, though at a small risk of loss of
> > mail.
> 
> ..case in point:
> fetchmail: 5.9.11 querying pop.net (protocol POP3) at \
<-- Snip what mailfilter does -->

>From the mailfilter log
mailfilter: Deleted "Microsoft Corporation Program Security
Department" <imyxujfhrevtf-uayly@updates.msdn.com>: latest internet
critical update, Tue, 23 Sep
2003 18:12:52 -0400. [Size limit MAXSIZE_DENY exceeded, 160654/140000]

mailfilter: Deleted "Microsoft Corporation Program Security
Department" <imyxujfhrevtf-uayly@updates.msdn.com>: latest internet
critical update, Tue, 23 Sep
2003 18:12:52 -0400. [Size limit MAXSIZE_DENY exceeded, 160654/140000]

mailfilter: Deleted "MS Network Security Division"
<dglqjjsff-bhosttjb@support.com>: Last Internet Security Update, Tue,
23 Sep 2003 18:15:59 -0400. [Size limitMAXSIZE_DENY exceeded,
160483/140000]

mailfilter: Deleted "Edgardo Rowland" <wyoooyar@juno.com>: FREE RX
Prescriptions - Valium-Prozac-Xanax-Soma ..., Tue, 23 Sep 03 17:17:11
GMT. [Applied filter:
'^Subject:.*free']

mailfilter: Deleted "Francisco Wade" <f_wade_ab@chello.at>: Catch a
cheating lover using SPY Software..                            z
7z6vc83zkhffp, Tue, 23
Sep 2003 20:42:08 +0000. [Applied filter: '^FROM:.*@chello.at']

mailfilter: Deleted "Loren Wood" <ppgcogkw@netease.com>: Increase your
penis size Now  brash, Wed, 24 Sep 03 09:19:18 GMT. [Applied filter:
'^Subject:.*penis']
+OK Message follows


etc, etc,etc

On that run I had 62 messages on the server.  After mailfilter did its
thing, fetchmail downloaded 40 messages.  Of those 40 2 were spam cought 
by SA and they were added to the mailfilter rules, so I won't see them 
again.

I guess you could use fetchmail to weed them out but I found that
spending time on the DENY rules in mailfilter was better spent.

Rather then reinvent the wheel, I installed mailfilter.


Wayne
-- 
A computer lets you make more mistakes faster than any invention in
human history - with the possible exceptions of handguns and tequila.
_______________________________________________________



Reply to: