[plug] Is this a spam attack?

[Richard Meyer]

----- Forwarded by Richard Meyer/Australia/Contr/IBM on 14/05/2003 09:12 AM
-----
                                                                                                                                    
                      Luke Dudney                                                                                                   
                      <dex at wn.com.au>          To:       plug at plug.linux.org.au                                                     
                                               cc:                                                                                  
                      13/05/2003 05:22         Subject:  Re: [plug] Is this a spam attack?                                          
                      PM                                                                                                            
                      Please respond to                                                                                             
                      plug                                                                                                          
                                                                                                                                    
                                                                                                                                    



>
>Postfix does the job quite well on it's own, when configured for:
> - sender address verification (probe the sender domain's MX for the
>existence of the sender address)
> - reject_rbl_client with your choice of RBLs such as bl.spamcop.net and
>proxies.relays.monkeys.com
> - reject_unknown_sender_domain
> - reject_non_fqdn_hostname

>I've also got it only accepting hotmail.com and yahoo.com (very
>frequently forged) messages from hotmail and yahoo servers, but that's a
>little more in-depth.

Since we appear to be talking about hostile traffic here, has anybody got
any experience with the following

: BaitAndSwitchHoneypot.

: Reroutes hostile traffic to a honeypot.

It's on the latest Linux Format DVD.

RichardM