Recently, I've been seeing a fair number of spam messages that have been sent to my majordomo address. They are sent from bogus "From:" addresses, and since majordomo doesn't need Viagra, etc, "he" replies with a long stream of error messages:
&squawk("Command '$cmd' not recognized.");
This message with every line parroted back as "not recognized" PLUS the majordomo help text is then sent to the fake "From:" address, and the isp, if it exists, sends it BACK to me complaining about a non-existant user. As majordomo-owner, I get it in my inbox.
To put a stop to this, I modified majordomo 1.94.5 in the following ways:
I added a threshold of 10 "not recognized" errors, which if exceeded AND we have NOT SEEN ANY valid commands, the following actions take place:
1. Processing of the message is terminated.
2. The help text is not sent.
3. Instead of replying to the "sender", we send just send a short note to majordomo-owner that says a message with > THRESHOLD errors was found and a reply was NOT sent to "sender".
Save Link As to get the hacked "majordomo" 1.94.5 module.
Save Link As to get the diffs from the stock "majordomo" 1.94.5 module.
Web site last updated July 7, 2005.
This page copyright 2005, William F. Dudley. The code, however, is distributed under the majordomo license.