Hi Camilo,
You can block a specific email or an entire domain, using badmailfrom on control
dir.
See:
http://www.qmail.org/qmail-manual-html/man8/qmail-smtpd.html
In your case, put these lines in badmailfrom file:
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[]s
[Sandro]
----- Original Message -----
From: "Camilo Echeverry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, March 13, 2003 12:40 PM
Subject: Mail to /dev/null
>
> Hi .
> We recently received some kind of Denial of service via spam.
>
> A spammer was sending e-mail with the format
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> The sender address was of the form :
> [EMAIL PROTECTED] (always ending with [EMAIL PROTECTED])
>
> before we detected it we already had almost 9000 undeliverable mailer daemon
> mails.
>
> Our mail passes first for an antivirus Gateway so we cannot just simply block
> the Remote IP via TcpRules
>
> My question is:
>
> is there any patch for qmail-ldap (compatible) to block e-mails based on a
> part of the senders e-mail address or by Subject and send them to /dev/null
> instead of make the Queue Grow with Mailer-Daemon e-mails ..?
>
> we are currently using qmail 1.03 and qmail-ldap-1.03-20030101.patch
>
> Thanks.
> Camilo
>
> --
>
> _____________________________________________________________________________
> Cuando un Arquero dispara gratuitamente ..
> Tiene consigo toda su habilidad ...
>
> Proverbio Oriental
> _____________________________________________________________________________
>