PDA

View Full Version : How to find spam traps



ICEWARP_BRAZIL
12-03-2011, 11:51 AM
This filter helps find accounts that receive e-mails which don't exist, then you can paste results in Excel, sort and create spam traps for these (in the Limits tab of an account, State -> Spam trap, it will block IP that sent mail for the duration specified in Intrusion Prevention).

All that I miss is some stats in icewarp referent to spam traps.

Where Recipient is local (then choose account does not exist)
and ! Where Sender's IP address is trusted
and ! Where SMTP AUTH
and Where Recipient matches domain1.com;domain2.com
Stop processing more rules
and Forward to cf-find-traps@mydomain.com (create this account with unlimited disk space to avoid NDR)
and Add %%Current_Recipient%% to a file (specify a text file, ex: domain.com/trap.txt)

Note: in domain1.com;domain2.com replace with domains you want to check for destination emails to inexistant account

You can also simply setup catch all on a domain to find emails sent to accounts which you never announced and consider using them as spam trap. Log analyser can be useful to help with suck task also.

flaviozluca
09-02-2012, 04:48 PM
Also see: http://forum.icewarp.com/forum/showthread.php?1210-Using-intrusion-prevention-with-spamtrap-accounts&p=3916#post3916