mailbomb

One of my users is getting obscene emails - someone seems to
have
signed her up for mailing list...
All the emails are From: a particular address (its a google
group).
What would be the best way to reject these mails (we cant
unsubscribe
from the group just yet)

 Right now the mails are being detected as spam because of
the content
but I would rather reject. Is there a way to reject these
emails based
on the From  address?

sai

Thanks Barry.

I have tried to use g_ban_from as it looks like it would
reject the
mail at SMTP level,  but it looks like our unsubscribe
attempts have
been successful so I dont know if it would have worked.


sai


On Jan 2, 2008 12:29 PM,  <webmaster1usa.com> wrote:
>
>
> If the filter is for one customer only, on the Admin
screen click on
> Accounts.
> On the Accounts screen, pull-up the user's account,
then click on Filtering,
> If Subject > contains > bad word (group name),
then Drop.
>
> If the filter is for everyone on your server, then add
it onto the Spam
> Filter Rules page (which adds it into mfilter.rul)
>
> If you "can't unsubscribe the customer from the
group yet" then there are
> other options, such as Hold... (in #1 filtering rules
above)
> or you could even Redirect those emails into a separate
account (via the
> mfilter page)
>
> BarryZ
> 1USA
>
>
> ----- Original Message -----
> From: sai
> To: surgemail-listnetwinsite.com
> Sent: Tuesday, January 01, 2008 6:54 AM
> Subject: [SurgeMail List] mailbomb
>
> One of my users is getting obscene emails - someone
seems to have
> signed her up for mailing list...
> All the emails are From: a particular address (its a
google group).
> What would be the best way to reject these mails (we
cant unsubscribe
> from the group just yet)
>
>  Right now the mails are being detected as spam because
of the content
> but I would rather reject. Is there a way to reject
these emails based
> on the From  address?
>
> sai
>
>
>

This type of attack is more commonly known as a
"list-link attack" and 
crippling to the targets mailbox.  While list subscriptions
continue to 
accept e-mail without verification then this type of attack
will remain 
common and sadly quite effective.  That said surgemail
"friends" system can 
stop a list link attack dead in the water.


----- Original Message ----- 
From: "sai" <sonicsaigmail.com>
To: <surgemail-listnetwinsite.com>
Sent: Wednesday, January 02, 2008 11:19 AM
Subject: Re: [SurgeMail List] mailbomb


> Thanks Barry.
>
> I have tried to use g_ban_from as it looks like it
would reject the
> mail at SMTP level,  but it looks like our unsubscribe
attempts have
> been successful so I dont know if it would have
worked.
>
>
> sai
>
>
> On Jan 2, 2008 12:29 PM,  <webmaster1usa.com> wrote:
>>
>>
>> If the filter is for one customer only, on the
Admin screen click on
>> Accounts.
>> On the Accounts screen, pull-up the user's account,
then click on 
>> Filtering,
>> If Subject > contains > bad word (group
name), then Drop.
>>
>> If the filter is for everyone on your server, then
add it onto the Spam
>> Filter Rules page (which adds it into mfilter.rul)
>>
>> If you "can't unsubscribe the customer from
the group yet" then there are
>> other options, such as Hold... (in #1 filtering
rules above)
>> or you could even Redirect those emails into a
separate account (via the
>> mfilter page)
>>
>> BarryZ
>> 1USA
>>
>>
>> ----- Original Message -----
>> From: sai
>> To: surgemail-listnetwinsite.com
>> Sent: Tuesday, January 01, 2008 6:54 AM
>> Subject: [SurgeMail List] mailbomb
>>
>> One of my users is getting obscene emails - someone
seems to have
>> signed her up for mailing list...
>> All the emails are From: a particular address (its
a google group).
>> What would be the best way to reject these mails
(we cant unsubscribe
>> from the group just yet)
>>
>>  Right now the mails are being detected as spam
because of the content
>> but I would rather reject. Is there a way to reject
these emails based
>> on the From  address?
>>
>> sai
>>
>>
>>
>