LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-12-2011, 06:03 AM   #1
DebianUser
Member
 
Registered: Apr 2010
Posts: 88

Rep: Reputation: 15
dropping all email for specific email address


I have a user who was getting constantly spammed so I deleted their email account but it's still coming in and trying to get delivered, how do drop all email for a specific email address?

i'm running exim / spamassasin / iptables if that helps
 
Old 06-12-2011, 08:24 AM   #2
zordrak
Member
 
Registered: Feb 2008
Distribution: Slackware
Posts: 595

Rep: Reputation: 116Reputation: 116
/etc/alias

username > /dev/null
 
Old 06-12-2011, 11:23 AM   #3
Hangdog42
LQ Veteran
 
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,803
Blog Entries: 1

Rep: Reputation: 422Reputation: 422Reputation: 422Reputation: 422Reputation: 422
@DebianUser

So does this mean you've given up on trying to deal with the fact that your machine has been compromised?
 
Old 06-13-2011, 08:58 AM   #4
DebianUser
Member
 
Registered: Apr 2010
Posts: 88

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by zordrak View Post
/etc/alias

username > /dev/null
/etc/alias doesn't exist I'm also running directadmin



HangDog42 the compromised was removed and also a fresh os install was done.

Last edited by DebianUser; 06-13-2011 at 09:00 AM.
 
Old 06-13-2011, 11:20 AM   #5
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
Quote:
HangDog42 the compromised was removed and also a fresh os install was done.
And have you taken appropriate steps to ensure that you won't become re-compromised? By appropriate steps I don't mean changing passwords.

Quote:
I deleted their email account but it's still coming in and trying to get delivered
Your email program is attempting to deliver mail to a NON-EXISTENT user. You either have a misconfiguration in your exim setup or your system isn't as clean as you think it is. The appropriate response from your MTA would be to send an error code with a 500 level response. You will still get spam for this user account for a long time, but most MTAs will stop trying to deliver a particular message with this type of response.

Last edited by Noway2; 06-13-2011 at 11:27 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] allow unsubscribed email address to send email to mailman list umarzuki Linux - Server 1 07-01-2010 03:54 AM
Send email to specific SMTP servers per email from my server? neilius Linux - Server 6 06-25-2009 06:31 AM
run a shell script/cronjob when any email arrive to specific email address ikillu Linux - General 3 05-30-2009 08:18 AM
About blocking specific email address alucard001 Linux - Server 1 12-17-2006 07:48 AM
Relay email for specific domains to an external address on a non-standard port BaDaBooM Linux - Networking 2 03-18-2003 10:40 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:27 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration