This is a discussion on Postfix as honeypot - some Qs within the mailing.postfix.users forums, part of the Mail Servers and Related category; Hi, everyone, This is a repeat from the honeypots mailing list, for lack of a reply with specifics concerning postfix: ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi, everyone,
This is a repeat from the honeypots mailing list, for lack of a reply with specifics concerning postfix: I have been trying to design an anti-spam honeypot, utilizing a postfix server. I have gone through the following material: http://www.trackinghackers.com/solutions/sendmail.html http://www.securityfocus.com/infocus/1747 http://www.securityfocus.com/infocus/1748 and I liked the first one. Here are the issues I am dealing with, right now (as a relative newbie in postfix, but having no other alternative to work with, at the moment): - cannot find the equivalent of some the options mentioned in the sendmail-based article, related to postfix. I want the server to APPEAR as an open relay for everybody (I know - trust me - I do not want to relay any email, except for what I will be controlling - thus having enabled defer_transports = smtp), but I am having problems in getting mynetworks and smtpd_etrn_restrictions right, to achieve this, e.g. I am not sure how to set the mynetworks for everybody (0.0.0.0/0 does not seem to work?!?), while being afraid that whatever I come up with, will be damaging with smtpd_etrn_restrictions = permit_mynetworks, reject .... any ideas?!? - wondering if there could be more about such a setup, as far as logging/processing of logs/reporting (perhaps automatic - I am thinking here of some automatic way of informing the spamcop.net of the world?!?) - this more of a long shot. One link someone was kind enough to point me to was: http://www.codecutters.org/spam/smtphoneypot.html ... which I am still working on digesting the concepts of ... Any ideas/suggestions/links to help me understanding what more could I get out of the above, and postfix capabilities, would be highly appreciated. I have read some of the anti-spam links from the postfix.org, but I cannot seem to get this one right: TIA, Stef |