2006/06/05

Email Honeypot

I want to set up an email honeypot which seemed to act as an open relay to attract spammers. The trick is to allow all IP addresses from 1.aaa.bbb.ccc to 233.xxx.yyy.zzz to relay in the /etc/mail/access file. However, the emails queued which are deposited by spammers must not be delivered out. Hopefully, there are some easy to understand settings in sendmail.mc to accomplish this task. I also start a cron daemon to move the files in the default mail queue directory to other protected path. With a bit of luck, my email honeypot is successfully operational.

No comments: