Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - honeypot all but certain addresses
  FAQ FAQ  Forum Search   Register Register  Login Login

honeypot all but certain addresses

 Post Reply Post Reply
Author
hookjd View Drop Down
Newbie
Newbie


Joined: 22 June 2006
Status: Offline
Points: 38
Post Options Post Options   Thanks (0) Thanks(0)   Quote hookjd Quote  Post ReplyReply Direct Link To This Post Topic: honeypot all but certain addresses
    Posted: 01 May 2009 at 1:15pm
I have a client on my spamfilter install that receives an unbelievable amount of spam.  Of the 51 domains I have in config, it probably is the culprit for 90% of my spam.  Most of the spam is just flooding addresses like coa7023dl@domain.com (totally random addresses).  therefore, I have switched their domain to using the "authorized TO Emails" whitelist so that only email to those addresses that are legit will be delivered.

But I'd also like to know if I can set it so that all other email (ie: email to non-active email addresses) will result in the IP being blocked via honeypot.  How would I set this up?  I don't want to guess and get it wrong.  Thanks.
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 01 May 2009 at 5:25pm
Sorry hookjd, that is not possible - all that can happen is that emails sent to the addresses not in the "authorized TO emails" will cause the sender to be temporarily blocked by the blacklist IP cache filter (if the email attempts are occurring several times within a few minutes).
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
hookjd View Drop Down
Newbie
Newbie


Joined: 22 June 2006
Status: Offline
Points: 38
Post Options Post Options   Thanks (0) Thanks(0)   Quote hookjd Quote  Post ReplyReply Direct Link To This Post Posted: 01 May 2009 at 5:40pm
How about stopping the NDRs for the entire domain.  Is that possible?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 01 May 2009 at 7:33pm
One of SpamFilter's strengths is actually the fact that NDRs will never be generated/sent by SpamFilter when spam emails are stopped. If a spammer, for example in your case, sends an email to a user not defined in the "Authorized TO" whitelist, SpamFilter will reject the email by outputting an SMTP error code during the SMTP session, along with a text line describing the reason the email was rejected. Per RFC, the **sender's mail server** must, at this point, generate an NDR to notify the sender of the non-delivery. It is thus the remote sender that will be creating and generating an email to the sender, not SpamFilter.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.078 seconds.