Topic: Urgent - How to block one incoming email address

[KelvinLee]

Damian,

Perhaps investigate the use of :-

/var/qmail/control/badmailfrom

Kelvin

[Damian]

That looks really good Kelvin.
There's a (kind of) SME howto for this at http://aplawrence.com/SME/largenewsletter.html.
I'll try later today after trying phoning the offender.
Cheers,
Damian

[Damian]

OK, an update. I called the company and they said that the originator sent just one email but one of the recipients uses MS SBS 2003 which has a known vulnerability (what - just one?) for which a patch was issued last year. That vulnerability was causing the issuing of thousands of duplicate emails, apperently on the originator's behalf. They apologised and said they have de-registered the domain. I'll go ahead and nobble the sender in qmail later today.
Thanks.

BTW - I suggested that if more people switched to Linux for their mail server that this wouldn't happen.

[wallyrp]

Good Morning,

I know your trying to block the email addy but what about blocking this: relay-1.mail.demon.net which is sending the email?

Also, I didn't see anything in the headers that indicated that the BCC field was being used? I'm trying to block all BCC email from my system as that's how some spam gets through. I'm using ASSP and I feel comfortable with it. I've just told my users that I am doing what I can at the server level but they must set some rules in Outlook to counter the rest of the crap.

Take a gander at a 1970 Chevelle Malibu Ebay #4545890035 woot woot! Ends May 2nd 2005.

[Damian]

Thanks Wally, Kelvin, Marco & Ray (& hordeuser),
Well, whaddya know. The emails stopped before I got to try it out. I count 6534 emails from that PC before it stopped. Cleaned them up using horde webmail so no probs there.
It's a very useful exercise though and now I know what to do when it hits the fan.
A tribute also to this SME 6.01 server with reclaimed HW (PII 300MHz and 256MB RAM) that it dealt with the issue without going over.
Cheers to All.
Damian

[Black]

lol@ http://www.dungog.net/sme/files/

Talk about a confusing and useless site.