Spoof!

or Fun Ways To Spend Your Afternoon #4853

This afternoon I started getting mails saying that messages had been rejected due to lack of storage. Over 2000 appeared in a very short space of time – it seems my domain has been spoofed once again. This wouldn’t be a big deal except that my server was already near capacity and this flurry of activity pushed it over the edge. I’d been aware of the space issue for a while, and had plans to address it but quite simply hadn’t bothered until I was forced into action.

My planning had gotten as far as preparing a larger partition for /var, but it was sitting idle. A quick reboot into single user mode, mount the new partition, copy the data, unmount, move & rename the folders, edit /etc/fstab, remount, check everything appears normal and reboot. By far the longest part was copying the data – next time I’m using rsync so I can track progress.

Unfortunately the bounces are still rolling in. I think I’m finally going to have to look into getting SPF set up.

Tags: , , , , ,

2 Responses to “Spoof!”

  1. ScottK says:

    In addition to setting up an SPF record, ubuntu-server is pretty well equipped with packages to reject mail that fails SPF tests (especially if you’re using Postfix).

  2. Alan Pope says:

    SPF :( Greylisting \o/

    I use greylisting on my Ubuntu server and my spam has gone from many hundreds a day down to about 3.

    http://en.wikipedia.org/wiki/Greylisting

Leave a Reply