<snip>
I was becoming really irritated with emails from my webmaster (which
is me) or from support (which is me) telling me that my account was
about to be terminated (most of these were carrying virus code). The
most "amusing" spam emails (if I can say amusing) were the ones
pretending to be from the webmaster, or whoever, at my domain that
threatened to terminate my account because the email address was being
used for spamming (all of these were virus carriers).
I got tired of this pretty quickly too, as did my users. My solution
was simpler, I blocked them with sendmail access lists:
(from /etc/mail/access)
From:admin(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:administrator(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:register(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:support(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:mail(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:service(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:info(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
From:webmaster(_at_)bl(_dot_)org ERROR:5.0.0:550 You've got a virus!
<end>
I know no one other than me, while reading the logs, will see the
"You've got a virus!" message, but I still send it. =)
Since adding those to my access db, I'm now blocking anywhere from
150-750 messages a day, probably averaging about 350/day or so.
--
Michael Parson
mparson(_at_)bl(_dot_)org