Spoof!
or Fun Ways To Spend Your Afternoon #4853
This afternoon I started getting mails saying that messages had been rejected due to lack of storage. Over 2000 appeared in a very short space of time – it seems my domain has been spoofed once again. This wouldn’t be a big deal except that my server was already near capacity and this flurry of activity pushed it over the edge. I’d been aware of the space issue for a while, and had plans to address it but quite simply hadn’t bothered until I was forced into action.
My planning had gotten as far as preparing a larger partition for /var, but it was sitting idle. A quick reboot into single user mode, mount the new partition, copy the data, unmount, move & rename the folders, edit /etc/fstab, remount, check everything appears normal and reboot. By far the longest part was copying the data – next time I’m using rsync so I can track progress.
Unfortunately the bounces are still rolling in. I think I’m finally going to have to look into getting SPF set up.
Related posts:
Related posts brought to you by Yet Another Related Posts Plugin.
look good
23 Jan 2008 6:23 pm
In addition to setting up an SPF record, ubuntu-server is pretty well equipped with packages to reject mail that fails SPF tests (especially if you’re using Postfix).
23 Jan 2008 6:23 pm
SPF
Greylisting \o/
I use greylisting on my Ubuntu server and my spam has gone from many hundreds a day down to about 3.
http://en.wikipedia.org/wiki/Greylisting