I am a new Smartlist user, so please forgive any really obvious ignorance.
The messages on my list are mostly getting delivered to the list members,
but all of the messages delivered to my mailbox have the subject line "Mail
delivery failed: returning message to sender" or something similar. The
very bottom of this message will usually have the body of the message posted
to the list by another user. Does anyone have any suggestions for making
this delivery system resemble something a little more normal-looking?
Tim Dees
tim(a)timdees.com
I think I have solved the problem in a very simple way.
I used to have my email address listed in the dist file as follows
tlt(a)tltodd.com
I changed it to just, tlt without the @tltodd.com.
Now the types of spam that were faking being me are being rejected.
Here's an example header from one of them.
> From tlt(a)tltodd.com Mon Jun 14 20:09:45 2004
> Received: from AM-XXK ([218.22.151.181])
> by tltodd.com (8.9.3/8.9.3) with SMTP id UAA31512;
> Mon, 14 Jun 2004 20:09:42 -0500 (CDT)
> (envelope-from tlt(a)tltodd.com)
> X-Message-Info: 952DXU698SGl27mufALBrsLPN694MC5lSZGquO51
> Received: from 49.232.72.60 by heublein21-or74.atom906.tlt(a)tltodd.com with DAV;
> Wed, 16 Jun 2004 02:13:23 +0100
> Message-ID: <1977290425195.12559@tlt@tltodd.com>
> X-Originating-IP: [152.141.110.254]
> X-Originating-Email: [tlt(a)tltodd.com]
> X-Sender: tlt(a)tltodd.com
> Reply-To: "Freddie Paul" <tlt(a)tltodd.com>
> From: "Freddie Paul" <tlt(a)tltodd.com>
> To: "Tlt" <tlt(a)tltodd.com>
> Subject: hiTlt
> Date: Tue, 15 Jun 2004 18:10:23 -0700
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="--6022717837479247247"
> X-Diagnostic: Not on the accept list
> X-Envelope-To: [my-mailing-list]
The spammers apparently haven't figured out how to match my email
address with my real name. Notice how the Message-ID: field is also
faked to be from my system.
I can now send messages to the list from my localhost without any
problem and not get faked messages coming through.
Tell me if there are any flaws in this that you might think of.
Terry Todd
On Tue, Jun 15, 2004 at 11:42:57AM -0400, Charlie Summers wrote:
> At 10:43 AM -0400 6/15/04, Terry Todd is rumored to have typed:
>
> > What I'm wonndering is if anyone has done anything to beef up the
> > dist file or accept file format so it checks for more than just
> > the email address of the subscriber.
>
> You just answered your own question. The stock SmartList contains only
> email addresses within the dist file (although it allows for some additional
> information, that information is not captured by the stock SmartList), so you
> can NOT check for "more." Feel free to code the additiona, but you'll quickly
> realize you have yet another problem...
>
> > a dist file entry something like this
> >
> > "Senders Name" <email(a)mydomain.com> 192.168.1.1 (comment)
>
> Which would be impossible to mail _to,_ which is the central purpose of
> the dist list (have a ball rewriting choplist to deal with stripping out the
> email address from that line). Also makes no sense at all, since most people
> on the Net use dynamically-allocated IPs instead of fixed IPs, so your idea
> of tagging everyone to an IP (even a C or B block) is futile. You'd be
> rejecting valid submissions routinely, ticking off your subscribers.
>
> > I had been thinking of using SmartList as a spam filter
OK forget I ever suggested using smartlist as a spam filter.
I've tried many many other spam filtering solutions. None of them work 100%.
So I wrote my own that is essentially the same thing as what I suggested
here. It is a whitelist of only those I accept email from. It works.
The original problem is spam got through to a smartlist mailing list
by header information being faked. How can that be prevented?
What do others using smartlist do to prevent this from happening?
Terry Todd
>
> SmartList is not designed to be a spam filter. It is a mailing list
> distribution package. If you want a spam filter...use a spam filter. To
> protect SmartList, pipe the mail from rc.local.s00 to whatever spam filter
> you choose.
>
> If you run your own mail server, there are hundreds of solutions (RBLs,
> content filters [yuck], massive blocking of dynamic IPs in the access
> database, etc., etc). If you are on a shared server and don't control your
> own mail server, use one (or more) of the many procmail/perl solutions out
> there. Why would you attempt to rewrite mailing list distribution software to
> a spam filter, when you could do what you suggest above with a single recipe*
> in your personal .procmailrc file anyway? It's like using your email client
> as a word processor to write a novel; you might get it to work, but it'll
> cause you no end of unnecessary grief when OpenOffice is available to make it
> more efficient. Right tool for the right job.
>
> Charlie
>
>
>
>
> * A recipe like...
>
> :0 # Yeah, no escapes, I know, I'm in a hurry
> * ^From.*tlt(a)badger.tltodd.com
> * !^Received*192.168.1.1
> /path/to/home/possible_spam.txt
>
>
>
> _______________________________________________
> Smartlist mailing list
> Smartlist(a)lists.RWTH-Aachen.DE
> http://MailMan.RWTH-Aachen.DE/mailman/listinfo/smartlist
Charlie,
Yes, they are discussion lists.
What I'm wonndering is if anyone has done anything to beef up the
dist file or accept file format so it checks for more than just
the email address of the subscriber.
a dist file entry something like this
"Senders Name" <email(a)mydomain.com> 192.168.1.1 (comment)
so it checks for not only email address but senders name and IP address
as well.
With those 3 checks in place it would be pretty darn hard for a
spammer to fake it I would think.
BTW - the spams I got had also forged the Message-ID: header field.
I had been thinking of using SmartList as a spam filter with me
being the only recipient in the dist file and all of those on my
whitelist being in the accept file.
Terry Todd
On Tue, Jun 15, 2004 at 09:40:29AM -0400, Charlie Summers wrote:
> At 6:35 AM -0400 6/15/04, Terry Todd is rumored to have typed:
>
> > Is there a way to only allow mail from me to get through only if
> > it originates from my localhost?
>
> Sure. Write a trivial procmail recipe in rc.local.s00 that does the work
> checking for specific data in the Received: ehader fields (setting the
> variable in rc.custom, of course, so the rc.local.s00 file is invoked).
> Although someone determined can presumably forge that, too, it'll drop the
> auto-generated spam and such. (The nice thing about SmartList is that you
> have the source code, and can add to or modify it in any way you wish.)
>
> You didn't make it clear whether this is a discussion list or a one-way
> "broadcast" list. If it's a broadcast list, you should have already set the
> list to "moderate" which would have avoided the problem in the first place.
> If it's a discussion list, you will eventually receive viruses or spam forged
> from _other_ legitimate (subscribed) addresses, which removes this from being
> a SmartList problem and makes it a spam problem. We _all_ have that problem...
>
> Charlie
>
>
>
> _______________________________________________
> Smartlist mailing list
> Smartlist(a)lists.RWTH-Aachen.DE
> http://MailMan.RWTH-Aachen.DE/mailman/listinfo/smartlist
I've been using SmartList to run my mailing lists since 1997.
I've never had a problem with this until just a few days ago.
Recently spam is getting through to one of the lists I maintain by
faking the From: header to be from me. They use my email address
but the name on the From: line is not me.
Is there a way to only allow mail from me to get through only if
it originates from my localhost?
TIA
the manual says:
one of the moderators should then resend the mail to the list after
adding an "Approved: his_own_address" field to the header
(and possible editing the contents of the mail).
My question is how does one add "approved tom(a)westheimer.net" to the
header? Does this really mean the first line of the body or what?
TIA
Tom
I run a couple of smallish email lists using smartlist hosted at a commercial site and recently there
are many instances where subscribers of one list are not getting all the messages posted to the list
(the control files for the two lists are identical). The messages are received and, according to the log,
are properly processed (IOW, there is no difference in the log abstract between messages received
and missing messages). I seems as if a complete address block fails to get the messages, for
example, I have about 4 addresses at my own domain (ellerbach) that are recipients (including the
list's digest) and if a post is missing from one it is missing from all.
Has anyone run into this kind of problem? Would changes to the choplist parameters be worthwhile
testing (I'm using the defaults, 32 8 64 0 200000 4)?
Rich
When I send to my list, certain people do not get the
e-mails (no bounceback either). The message headers
have the X-Authentication-Warning header included and
I think this may be the culprit. Can anyone confirm
this? I know it's an issue with Sendmail but I just
want to know if correcting (removing) that header will
cure the problem.
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover
Hi,
i have 700 users in my net and i want to create a e-mail address, that if a
send to all(a)domain.com, everyone receives.
I try to create a list named 'teste' with the command ./createlist teste
user(a)domain.com
After that, i run ./donatelist user teste
When i send e-mail to teste-request with subject subscribe, i receive another
e-mail with errors:
"|exec /var/spool/listserv/.bin/flist teste-request"
(reason: Insufficient permission)
(expanded from: <teste-request(a)domain.com>)
----- Transcript of session follows -----
flist: Insufficient privileges to become "listserv"
550 5.0.0 "|exec /var/spool/listserv/.bin/flist teste-request"...
Insufficient permission
In /var/spool/listserv:
drwxrws--x 4 user listserv 4096 Mar 30 16:37 teste
In /var/spool/listserv/teste:
-rw-rw-r-- 2 user listserv 62 Mar 30 16:36 accept
drwxrws--- 3 user listserv 4096 Mar 30 16:36 archive
-rw-r--r-- 2 listserv listserv 794 Apr 26 1999 archive.txt
drwxrws--- 2 user listserv 4096 Mar 30 16:37 bounces
-rw-rw-r-- 2 user listserv 62 Mar 30 16:36 dist
-rw-r--r-- 2 listserv listserv 2316 Apr 26 1999 help.txt
-rw-rw---- 1 user listserv 0 Mar 30 16:37 log
-rw-rw---- 1 user listserv 0 Mar 30 16:37 msgid.cache
-rw-rw---- 1 user listserv 4545 Mar 30 16:36 rc.custom
-rw-r--r-- 2 listserv listserv 10248 Mar 30 16:23 rc.init
-rw-r--r-- 2 listserv listserv 9139 Apr 26 1999 rc.request
-rw-r--r-- 2 listserv listserv 7642 Apr 26 1999 rc.submit
-rw-r--r-- 2 listserv listserv 0 Apr 26 1999 reject
-rw-rw---- 1 user listserv 0 Mar 30 16:37 request
-rw-r--r-- 2 listserv listserv 351 Apr 26 1999 subscribe.txt
-rw-rw---- 1 user listserv 0 Mar 30 16:37 tmp.from
-rw-rw---- 1 user listserv 0 Mar 30 16:37 tmp.request
-rw-r--r-- 2 listserv listserv 258 Apr 26 1999 unsubscribe.txt
Anyone can help me?
Thanks in advance,
Mauricio
Firstly to salute to all the members of the list. Sorry if my english is
so bad... I
have
a
problem
with
SmartList:
when
a
user
send
an
email
to
the
list,
in
head
of
message
appears
all
the
suscriptor's
directions
in
the
field
"Resent-From";
this
it's
very
annoying
when
the
suscritor's
number
is
so
long.
How
i'll
can
remove
this
field
of
the
all
message's
header?
Salu2
--
wikier(a)asturlinux.org
http://www.wikier.tk
wikier(a)jabber.org
