Re: spam to aliases and system accounts
On 20/04/17 13:27, Jonathan Dowland wrote:
> On Thu, Apr 20, 2017 at 10:43:33AM +0100, Brian wrote:
>> You would have to sound out and convince the exim4 maintainers. I can
>> well imagine their enthusiasm for a change might be muted.
>
> I've reported this before, IIRC, and was ignored. There's also a potential
> DoS situation because the default configuration will accept and store mail
> for some aliases in /var/mail/<name>, which might be / and could fill up
> without the admin noticing, especially if legitimate users have mail moved
> elsewhere (e.g. ~/Maildir)
>
How did you know my environment?
It is a nightmare actually. If any real and important mail is sent to
those addresses then it is probably buried under all the spam, making
those addresses pointless.
That is why I suggested, rather than completely removing them, the
possibility that the mailer could be configured not to allow external
mail to system users and related aliases. I could probably dig around
in the documentation and find a way to do that myself but I was curious
if anybody had already done so and documented their solution.
Regards,
Daniel
Reply to: