Google Answers Logo
View Question
 
Q: Prevent spammers from discovering our valid emails through sendmail 'scanning' ( Answered,   0 Comments )
Question  
Subject: Prevent spammers from discovering our valid emails through sendmail 'scanning'
Category: Computers > Security
Asked by: davious-ga
List Price: $10.00
Posted: 27 May 2004 13:45 PDT
Expires: 26 Jun 2004 13:45 PDT
Question ID: 352869
I have Sendmail 8.12 and we notice in our log files that spammers
attempt to send emails to hundreds of invalid email addresses in an
effort to find valid addresses we are using.  They're typically
successful at this and we've received spam on accounts as soon as 20
minutes after they're created.

My question, how can I configure sendmail to prevent spammers from
'scanning' for valid email addresses like this?
Answer  
Subject: Re: Prevent spammers from discovering our valid emails through sendmail 'scanning'
Answered By: maniac-ga on 27 May 2004 17:56 PDT
 
Hello again Davious,

For your specific request (slow down spammers) try what's recommended in
  http://www.dshield.org/pipermail/list/2003-October/026939.php
(scroll down a ways for the define commands)
There is also a "tweaking document" that describe these commands (and
a LOT of others) in more detail at
  http://www.sendmail.org/m4/tweaking_config.html

Beyond that, let me describe several alternative approaches that
should slow down (or stop) the spammers from filling your inboxes.
These first references describe an older version of sendmail (8.8 and
8.9) but should still work [unless I describe differently below] in
the newer version.

Let's start with the source - the main sendmail site at
  http://www.sendmail.org/antispam.html
which has a number of good recommendations. Using the first reference
as an example at
  http://www.sendmail.org/m4/anti_spam.html
there are a number of good recommendations that can be summarized as:
 - Relaying is denied by default; if you turn it on, make sure it is
configured properly so you don't become a spammer.
 - Better checking on sender information such as a reverse DNS lookup.
 - Access database. This describes how to set up reject / accept
lists, use the real time blackhole list,
 - Header checks. Some advanced checks based on how the headers are
constructed w/ a reference to digitalanswers for examples (though that
site appears dead).

Also check out
  http://www.sendmail.org/~ca/email/chk-810.html
which describes the differences in sendmail 8.10 and 8.11. [Exceptions noted here]

Of course, sendmail (the company) would like you to purchase MAS which
includes address harvesting prevention:
  http://www.sendmail.com/products/msmgr_antispam.shtml

Another commercial product at Roaring Penguin with MIMEDefang
  http://www.roaringpenguin.com/products/mimedefang/

If you need samples of known spam to help feed some of the tools, try
a spam trap or poison a spammers address harvesting with something
like
  http://www.monkeys.com/wpoison/

An interesting series of messages starting at
  http://lists.roaringpenguin.com/pipermail/mimedefang/2003-May/014568.html
one person's attempt to harvest sources of spam to help seed the
databases. [just use Next message several times to walk through the
analysis / feedback] The idea is to allow some success to spammers
using unused (but likely addresses) and then block them off.

Something called Spamilter which is a module you can add to sendmail
to process your spam more effectively:
  http://www.wanlink.com/spamilter/docs.php

You can also try Sender Policy Framework which can be used to reject
email from other than "authorized senders"; not all sites support this
but its use is growing.
  http://spf.pobox.com/
The downloads page has libspf which describes how to integrate with
sendmail (or use w/ Spamilter). There is also a perl script at
  http://spf.pobox.com/sendmail-milter-spf-1.40.pl
as well.

More links that you can possibly follow at:
  http://www.sendmail.org/~ca/email/spam.html

Search phrases used to find the information includes:
  sendmail spam
  sendmail antispam
  sendmail 8.12 spam
  sendmail address harvesting
  sendmail tarpit
  sendmail address harvesting
  sendmail dictionary attach

Good luck and hope you keep your email clean.
  --Maniac
Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy