On Thu, Mar 21, 2002 at 07:27:38AM -0500, Don Hammond wrote:
(Another OT hint: think this through carefully. You will accept messages
from spammers running dictionary attacks [e.g a(_at_)domain, b(_at_)domain,
etc.]
telling them incorrectly that these are "good" addresses. Unless there
is a specific site need, you risk turning the spigot wide open.)
Even worse than telling them they are "good" addresses, having ALL of them be
good. In the case of aformentioned "dictionary attack", that means whoever is
reading the catchall will receive one copy of the spam for each dictionary
word they try. For instance: right now somoene is trying just such an attack
on my domain. Last I looked at the log (this morning), they were still on
aa*(_at_)pure-chaos(_dot_)com(_dot_) And they've been on that for two days.
That's a LOT of
copies of whatever spam they're trying to send that I don't want.
--
Andrew Edelstein - andrew(_at_)pure-chaos(_dot_)com
"If you're not pissed off at the world then you're just not paying attention."
Kasey Chambers "Ignorance"
"If you're not frightened by this, you're simply not paying attention."
Harry Browne
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail