On Friday, September 10, 2004, 9:35:26 PM, Kenneth Porter wrote: > I've been getting the same bad RCPT TO from 200.232.195.50 for the last 13 > hours. I can see the same sendmail process in /var/log/maillog for that > amount of time, with "last message repeated xxx times" a lot. I tcpdump'd > the connection and see the RCPT TO and rejection over and over. (System is > Fedora Core 2.) What's the right thing to do about it? I hate to kill the > connection just to have this guy go fill someone else's logs.
Sounds like a good application for a tarpit, i.e.: http://www.spamcannibal.org/ Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
