probably not intentional, but with all the copies of the
SpamAssassin::CONF files all over the world (and the silly spammers
harvesting anything with @ in it)
The poor folks at <http://www.ress.com> must be wondering why they keep
getting emails for 'add'
<http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html>
I just went through with our FAQ/Documentation/ marketing folks and
asked them to make sure they use 'u...@example.com' and not the random
aol addresses they might have used when documenting things.
host -t mx ress.com
ress.com mail is handled by 10 mx01-dom.earthlink.net.
ress.com mail is handled by 20 mx00-dom.earthlink.net.
mx1.secnap.com.ionspam.net# telnet mx01-dom.earthlink.net 25
Trying 207.217.125.17...
Connected to mx01-dom.earthlink.net.
Escape character is '^]'.
220 whmx-tenant.pas.sa.earthlink.net EL_4_2_10_GMA_35 ESMTP EarthLink
SMTP Server Tue, 18 May 2010 14:20:50 -0700 (PDT)
helo mx1.secnap.com.ionspam.net
250 whmx-tenant.pas.sa.earthlink.net Hello mx1.secnap.com.ionspam.net
[204.89.241.253], please to meet you
mail from: <secur...@secnap.com>
250 <secur...@secnap.com>... Sender ok
rcpt to: <a...@ress.com>
250 <a...@ress.com>... Recipient ok
looks like it accepts wildcard email entries (I put in a random
address), so, this will be causing some backscatter as well. Either
bounces, or if using earthlink CR, the forged sender might be getting a
CR challenge backscatter email.
suggest: sed -i '' '/@ress.com/@example.com/g' on the perl code.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________