[Mimedefang] New spam technique

Penelope Fudd kernel at pkts.ca
Sat Jul 3 02:14:49 EDT 2004


Recently spammers verified their mailing list using this SMTP dialogue. 
How do I add this to mimedefang?

220 scotty.example.com ESMTP Sendmail 8.12.11/8.12.11; Thu, 1 Jul 2004
15:08:21 -0700
HELO c-24-1-219-157.client.comcast.net
250 scotty.example.com Hello c-24-1-219-157.client.comcast.net
[24.1.219.157], pleased to meet you
MAIL FROM: <admsupport at address.com>
250 2.1.0 <admsupport at address.com>... Sender ok
RCPT TO: <admin at example.com>
550 5.1.1 <admin at example.com>... User unknown
RCPT TO: <dante at example.com>
250 2.1.5 <dante at example.com>... Recipient ok
RCPT TO: <beelzebug at example.com>
250 2.1.5 <beelzebug at example.com>... Recipient ok
DATA
354 Enter mail, end with "." on a line by itself
Received: from 55.196.39.38 by 24.1.219.157; Thu, 20 Mar 2003 18:59:10
-0400
Message-ID: <S[20
.
250 2.0.0 i61M8Lw7028495 Message accepted for delivery
QUIT
221 2.0.0 scotty.example.com closing connection
-- 
Penelope Fudd <kernel at pkts.ca>



More information about the MIMEDefang mailing list