[ILUG] spammers at work?

[John Kelly]

On Fri, Mar 15, 2002 at 10:21:08AM +0000, Donncha O Caoimh wrote:
> Saw lots of "Unknown User" warnings in my Logwatch this morning so I
> went looking at /var/log/maillog, here's a bit from the log..
> 
> Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
> <fish at tradesignals.com>... User unknown
<snip>

Otherwise known as a "Rumplestiltskin attack", the attacker tries a lot of
common names @domain, hoping to hit the mark with at least one of them.

You can read more about it here:
http://www.brettglass.com/spam/paper.html#Rumplestiltskin
Brett also lists some possible methods to prevent/limit these attacks.

- John

---
I like that boulder . . . that is a nice boulder
http://www.fuckcuntandbollocks.com