Spoof!

or Fun Ways To Spend Your Afternoon #4853

This afternoon I started getting mails saying that messages had been rejected due to lack of storage. Over 2000 appeared in a very short space of time – it seems my domain has been spoofed once again. This wouldn’t be a big deal except that my server was already near capacity and this flurry of activity pushed it over the edge. I’d been aware of the space issue for a while, and had plans to address it but quite simply hadn’t bothered until I was forced into action.

My planning had gotten as far as preparing a larger partition for /var, but it was sitting idle. A quick reboot into single user mode, mount the new partition, copy the data, unmount, move & rename the folders, edit /etc/fstab, remount, check everything appears normal and reboot. By far the longest part was copying the data – next time I’m using rsync so I can track progress.

Unfortunately the bounces are still rolling in. I think I’m finally going to have to look into getting SPF set up.

Tags: filesystems, Linux, mail, postfix, spam, sysadmin

2 Responses to “Spoof!”

ScottK says:

In addition to setting up an SPF record, ubuntu-server is pretty well equipped with packages to reject mail that fails SPF tests (especially if you’re using Postfix).

Alan Pope says:

SPF :( Greylisting \o/

I use greylisting on my Ubuntu server and my spam has gone from many hundreds a day down to about 3.

http://en.wikipedia.org/wiki/Greylisting

Leave a Reply



Mobilized by Mowser Mowser