Bluehost.com Web Hosting $6.95

Postfix as honeypot - some Qs

This is a discussion on Postfix as honeypot - some Qs within the mailing.postfix.users forums, part of the Mail Servers and Related category; Hi, everyone, This is a repeat from the honeypots mailing list, for lack of a reply with specifics concerning postfix: ...


Go Back   Usenet Forums > Mail Servers and Related > mailing.postfix.users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-10-2004
Stef Mit
 
Posts: n/a
Default Postfix as honeypot - some Qs

Hi, everyone,

This is a repeat from the honeypots mailing list, for lack of a reply
with specifics concerning postfix: I have been trying to design an
anti-spam honeypot, utilizing a postfix server. I have gone through the
following material:

http://www.trackinghackers.com/solutions/sendmail.html
http://www.securityfocus.com/infocus/1747
http://www.securityfocus.com/infocus/1748

and I liked the first one. Here are the issues I am dealing with, right
now (as a relative newbie in postfix, but having no other alternative
to work with, at the moment):
- cannot find the equivalent of some the options mentioned in the
sendmail-based article, related to postfix. I want the server to APPEAR
as an open relay for everybody (I know - trust me - I do not want to
relay any email, except for what I will be controlling - thus having
enabled defer_transports = smtp), but I am having problems in getting
mynetworks and smtpd_etrn_restrictions right, to achieve this, e.g. I
am not sure how to set the mynetworks for everybody (0.0.0.0/0 does not
seem to work?!?), while being afraid that whatever I come up with, will
be damaging with smtpd_etrn_restrictions = permit_mynetworks, reject
.... any ideas?!?
- wondering if there could be more about such a setup, as far as
logging/processing of logs/reporting (perhaps automatic - I am thinking
here of some automatic way of informing the spamcop.net of the
world?!?) - this more of a long shot.

One link someone was kind enough to point me to was:

http://www.codecutters.org/spam/smtphoneypot.html ... which I am still
working on digesting the concepts of ...

Any ideas/suggestions/links to help me understanding what more could I
get out of the above, and postfix capabilities, would be highly
appreciated. I have read some of the anti-spam links from the
postfix.org, but I cannot seem to get this one right:

TIA,
Stef

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 07:41 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0