Re: Majordomo and spammers

[Ed Kasky <ed @ esson . net>]

FYI, demime also strips attachments at the same time that it strips 
the mime from a message.  I have lots of subscribers scratching their 
heads on that one...
Ed

At 03:58 PM Friday, 7/11/2008, Daniel Liston wrote -=>
> I have a sneaky suspicion that your spam may be graphical in nature, 
> where there is no body content, just an attached graphic.
> Demime removes the HTML content, leaving an empty message (just 
> assuming here), before your aliases file passes the
> converted message to your -outgoing alias where the digest script is 
> called.  You are probably creating your own problem in
> this case.
>
> As for the sequentiality of your pre-digest files, I have seen this 
> too, in some cases.  The solution is another patch...  I offer
> this piece of an email that I sent in September of 2003.
>
> > Do the timestamps on the digest.$$ messages coincide with times that
> > email was received for your list?  Have you looked in the
> > $digest_work_dir
> > to see what files are queued up in there?  Are there any skipped
> > numbers in the sequence of files?  You might need to modify line
> > #176 of the digest script to say
> >
> >          foreach (sort @files) {
> >
> > to clean things up.  You might also consider creating a tmp directory
> > in the majordomo $HOME (or work directory if they are different) with
> > the proper majordomo ownership and permission, then setting $TMPDIR in
> > the majordomo.cf to use that directory.
> In fact, I found reference to the same change on line 176 of digest 
> in a posting from Sept 2000 too.
> Dan Liston
>
> Tom Patterson wrote:
> > Thanks to Joe for help on this problem.  The patch immediately cut 
> > out the messages which were bouncing back to me due to the use of 
> > invalid e-mail addresses by the spammers.
> > I am however left with the problem that majordomo is still picking 
> > up on the spam messages and creating zero content messages in the 
> > digest folder.  When the digest is created, it then shows these 
> > messages, albeit as blank.
> > I have a script which deletes all zero content messages in the 
> > digest folder immediately before the mkdigest command is issued by 
> > a cron job.  The problem then arises that the remaining messages 
> > are not sequentially numbered in the digest folder, and do not all 
> > get picked up by the digest. I can get around this problem by 
> > renumbering the messages, starting from zero.
> > Also, I have two lists.  Only the list starting with the letter "s" 
> > is picking up the blank messages.  The list starting with the 
> > letter "v" does not pick up blank messages.
> > As the spam is addressed to majordomo @
domainname, I assume that 
> > majordomo is dumping the blank messages into the first folder he 
> > comes to.  I also assume that if I created a dummy list starting 
> > with a alpha character prior to "s", the zero messages would end up 
> > there, leaving my list folders unaffected by the spam.  I will try this next.
> > However, is there some way to prevent majordomo from creating these 
> > zero content messages?
> > -Tom
> >
> > ----- Original Message ----- From: "Joe R. Jah" <jjah @
cloud .
ccsf .
cc .
ca .
us>
> > To: "Tom Patterson" <pattersontj @
sbcglobal .
net>
> > Cc: <majordomo-users @
greatcircle .
com>
> > Sent: Wednesday, July 09, 2008 9:51 PM
> > Subject: Re: Majordomo and spammers
> >
> >
> > > On Wed, 9 Jul 2008, Tom Patterson wrote:
> > >
> > > > Date: Wed, 9 Jul 2008 06:04:38 -0500
> > > > From: Tom Patterson <pattersontj @
sbcglobal .
net>
> > > > To: majordomo-users @
greatcircle .
com
> > > > Subject: Majordomo and spammers
> > > >
> > > > I have recently moved my site to a new server using Q Mail, and 
> > > > reinstalled Majordomo.  I am having two problems.
> > > > 1.  I am getting hit with a great amount of spam addressed to 
> > > > majordomo, which is generating replies to non-existent addresses, 
> > > > which in turn bounce back to me.  The replies are the standard 
> > > > reply from majordomo when it does not understand a message.
> > > >      Is there any way of stopping these replies from Majordomo 
> > > > or of changing the majordomo's address from majordomo @
domain .
com?
> > > > 2.  All of these spam messages to majordomo are generating zero 
> > > > content messages in the digest folder, which in turn, adds blank 
> > > > messages to the digest.  How can this be fixed?
> > > > -Tom