[olug] DDOS attack on my Inbox. Spam "from me" being rejected

[Dan Clough]

It's very easy to fight - place SPF entries in your DNS records.

SPF is the best solution because any decent mailserver will recognize that
the spammer's mailserver isn't authorized to send mail for jays.net, and
will reject the message in question.  Here's a good BIND-based setup to
start with:

jays.net	IN	TXT	"v=spf1 mx:jays.net ~all"

Dan

-----Original Message-----
From: olug-bounces at olug.org [mailto:olug-bounces at olug.org] On Behalf Of
Brady Cox
Sent: Thursday, May 15, 2008 12:48 PM
To: Omaha Linux User Group
Subject: Re: [olug] DDOS attack on my Inbox. Spam "from me" being rejected

Yeah, this has been going around.  A few weeks ago I had the same problem.

Basically someone is changing the "From: blah at blah.com" to your address.

There is no way to fight this, as it's stupid easy to do.

I'm surprised it took them this long to do it.

I just hope that we don't end up on some email blacklist because of it.

On Thu, May 15, 2008 at 12:37 PM, Nick Hajek
<nhajek at meridian-technical.com> wrote:
> You've probably already done this, but make sure your server is not
> configured as an open relay.
>
> You might want to also set up a Sender Policy Framework record on your
> DNS server to help keep your legitimate out going mail from being tagged
> as spam because if it's source.
>
> Nick
>
> Jay Hannah wrote:
>> For the last week or so I've been getting about 600 bounced emails a
>> day from all over the Internet. Apparently I've had the glorious luck
>> that some spammer(s) have chosen to send their email From: "xxx yyyy"
>> <jay at jays.net>.
>>
>> This is a whole new universe of spam pain, that I have no idea how to
>> fight.
>>
>> Any ideas?
>>
>> j
>> collateral damage victim
>>     of tens of thousands of spam victims
>>
>>
>> Die, spammers. Die.
>>
>> _______________________________________________
>> OLUG mailing list
>> OLUG at olug.org
>> http://lists.olug.org/mailman/listinfo/olug
>>
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> http://lists.olug.org/mailman/listinfo/olug
>
_______________________________________________
OLUG mailing list
OLUG at olug.org
http://lists.olug.org/mailman/listinfo/olug