blocking spam (Re: [cobalt-security] VRFY root [rejected])

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

RH> Date: Fri, 11 Apr 2003 15:42:40 +0200
RH> From: "Robbert Hamburg (HaVa Web- & Procesdesign)"


Sorry for the OT post...


RH> Yep same problem here. I also use a seperate adres from my
RH> personal for the lists. For some odd reason my spammasssassin

Good idea.  I also recommend filtering based on To:, CC:, and
perhaps Received: fields.


RH> reinstall failed after a restore and i havent had time to get
RH> into it. (just become a father :-) )

Congratulations! :-)


RH> And now i get hammered with spam, and like you i prefer the
RH> ham instead of....

RH> So i hope eddy is willing to share his trap setup

I've been playing with BMF.  Although it's imperfect and requires
a substantial amount of training, I'm somewhat surprised at how
well it works.

FWIW:

* My <blacklist@xxxxxxxxx> address has gotten about 100 messages
  so far this month.  Not super, but it's increasing.

* My old <eddy@xxxxxxxxx> address, used years ago on mailing
  lists and POC info, seems to be up to 900 spams per month.
  Valid mail has ceased to flow, so I'm using that as a spam
  input, too.

I suggest people check out BMF:

	http://sourceforge.net/projects/bmf/

I need to tinker some more.  Integrating BMF more tightly with
the MTA and adding a few more features should _really_ be cool...


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.