Portal Home > Knowledgebase > Articles Database > Urgent help needed with sendmail redirect
Urgent help needed with sendmail redirect
| Posted by tnndotnet, 06-16-2008, 01:08 PM |
| A spammer has sent a ton of users a phishing email requesting the users password...
I work for a regional ISP, and we deal with alot of elderly people who would probably send him a response with a password... I looked over the mail log and one person did respond back to him...
Basically... I want to do like... a virtusertable entry that forwards any email sent to HIM... to ME...
so basically... his email is for instance: phishingspammer@gmail.com
I want to do something like this in the virtusertable (I understand it probably cannot be done thru the virtusertable):
phishingspammer@gmail.com goodguy@regionalisp.com
This way I can alert the people who DO try to send him emails that the email was stopped and to never respond with a password.
Any suggestions?
Thanks!
|
| Posted by HoundOfTheSmith, 06-16-2008, 04:33 PM |
| I don't think you can do that with non-local domains, though the experts on comp.mail.sendmail could probably tell you more.
You could however just create an access entry (http://www.sendmail.org/doc/sendmail-current/cf/README) something like:
To:phishingspammer@gmail.com ERROR:"550 Please don't email your password to phishers"
From:phishingspammer@gmail.com ERROR:"550 No mail from phishers"
That would catch any new inbound emails, and warn people that were trying to email them, without you having to do it personally.
|
| Posted by Mike - Limestone, 06-16-2008, 05:15 PM |
| Without getting away too much from the OP's question...
Even though the activity the OP is trying to block is phishing, are there any issues (legal or otherwise?) with redirecting clients' outgoing email in that way? I just wonder how I would feel if my outgoing email to a particular email address was being redirected to someone else without my knowledge.
Again, I understand that the OP is trying to stop phishing, but I wanted to pose the question anyway.
That said, HoundOfTheSmith's suggested method of simply blocking such email (and telling the user why) seems like an excellent solution.
-mike
|
| Posted by The Universes, 06-16-2008, 05:20 PM |
| Mike brings up a good point, as an end user, I definitely would not want my ISP reading my email, especially without notifying me. It definitely seems better to reject the email at the SMTP level with the appropriate message.
|
| Posted by tnndotnet, 06-16-2008, 11:33 PM |
| Thanks for posting that!
I was able to block mail being sent to that mail address.
Thanks again!
|
Add to Favourites 
Print this Article
Also Read
