home.social

#spamd — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #spamd, aggregated by home.social.

fetched live
  1. Returning readers will remember my "Eighteen years of greytrapping" piece (nxdomain.no/~peter/eighteen_ye or tracked bsdly.blogspot.com/2025/08/eig, and may also remember that it has numbers and graphs.

    It's now been more like 19 years of the activity, and the numbers and graphs are refreshed as of end of July.

    #spam #antispam #spamd #openbsd #greylisting #greytrapping #security #cybercrime #cybersecurity #smtp #email

  2. Returning readers will remember my "Eighteen years of greytrapping" piece (nxdomain.no/~peter/eighteen_ye or tracked bsdly.blogspot.com/2025/08/eig, and may also remember that it has numbers and graphs.

    It's now been more like 19 years of the activity, and the numbers and graphs are refreshed as of end of July.

    #spam #antispam #spamd #openbsd #greylisting #greytrapping #security #cybercrime #cybersecurity #smtp #email

  3. When the list of trapped hosts swells like it has over the last day, I wonder why.

    Now I know. I thought #wankstortion was dead, but one inboxed for the -owner address for a mailing list.

    General description in my 2022 piece "The Despicable, No Good, Blackmail Campaign Targeting ... Imaginary Friends?" nxdomain.no/~peter/despicable_ with links to preserved messages therein.
    #cybercrime #security #scams #sextortion #imaginaryfriends #spamd #greytrapping

  4. When the list of trapped hosts swells like it has over the last day, I wonder why.

    Now I know. I thought #wankstortion was dead, but one inboxed for the -owner address for a mailing list.

    General description in my 2022 piece "The Despicable, No Good, Blackmail Campaign Targeting ... Imaginary Friends?" nxdomain.no/~peter/despicable_ with links to preserved messages therein.
    #cybercrime #security #scams #sextortion #imaginaryfriends #spamd #greytrapping

  5. Running #OpenBSD 7.8 ​:openbsd:​

    DNS:
    #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
    Firewall:
    #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
    Mail:
    #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
    Spam-Defense:
    #spamd with auto-SPF-walk (no more greylisting issues).
    Web:
    #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
    Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

    #Nostr Relay in Rust building...

    #SelfHosted #SysAdmin #Security #Privacy

  6. Running #OpenBSD 7.8 ​:openbsd:​

    DNS:
    #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
    Firewall:
    #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
    Mail:
    #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
    Spam-Defense:
    #spamd with auto-SPF-walk (no more greylisting issues).
    Web:
    #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
    Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

    #Nostr Relay in Rust building...

    #SelfHosted #SysAdmin #Security #Privacy

  7. I added a few more translations of the phrase "The rest is trash" to the spamtraps at nxdomain.no/~peter/traplist.sh (see nxdomain.no/~peter/the_rest_is or bsdly.blogspot.com/2026/02/the).

    If you want further translations added, please let me know (with translation in your message).

    #spamtraps #greytrapping #spamd #openbsd #freebsd #antispam #imaginaryfriends #localization #cybercrime

    The list without wrapper text is available as bsdly.net/~peter/sortlist.txt (BIG! -- 22975800 entries as of right now, will increase)

  8. I added a few more translations of the phrase "The rest is trash" to the spamtraps at nxdomain.no/~peter/traplist.sh (see nxdomain.no/~peter/the_rest_is or bsdly.blogspot.com/2026/02/the).

    If you want further translations added, please let me know (with translation in your message).

    #spamtraps #greytrapping #spamd #openbsd #freebsd #antispam #imaginaryfriends #localization #cybercrime

    The list without wrapper text is available as bsdly.net/~peter/sortlist.txt (BIG! -- 22975800 entries as of right now, will increase)

  9. Possibly not blogworthy, but: One puzzling side effect of running greytrapping (as chronicled in nxdomain.no/~peter/eighteen_ye) is seeing the uptick in password guessing using even the obviously generated gibberish local parts, and the sheer volume of tries (see nxdomain.no/~peter/should_i_st and links therein). #greytrapping #passwordguessing #passwordgroping #spamd #ssh #pop3gropers

  10. Possibly not blogworthy, but: One puzzling side effect of running greytrapping (as chronicled in nxdomain.no/~peter/eighteen_ye) is seeing the uptick in password guessing using even the obviously generated gibberish local parts, and the sheer volume of tries (see nxdomain.no/~peter/should_i_st and links therein). #greytrapping #passwordguessing #passwordgroping #spamd #ssh #pop3gropers

  11. Hm. log entries like

    Sep 30 00:54:41 skapet spamd[83364]: (GREY) 171.4.7.241: <[email protected]> -> <[email protected]>
    Sep 30 00:54:41 skapet spamd[83004]: new entry 171.4.7.241 from <[email protected]> to <[email protected]>, helo ns3000605.ip-37-59-46.eu

    have me suspect they are actually reading my stuff such as nxdomain.no/~peter/eighteen_ye #spamtraps #greytrapping #antispam #cybercrime #spamd #openbsd

  12. Hm. log entries like

    Sep 30 00:54:41 skapet spamd[83364]: (GREY) 171.4.7.241: <[email protected]> -> <[email protected]>
    Sep 30 00:54:41 skapet spamd[83004]: new entry 171.4.7.241 from <[email protected]> to <[email protected]>, helo ns3000605.ip-37-59-46.eu

    have me suspect they are actually reading my stuff such as nxdomain.no/~peter/eighteen_ye #spamtraps #greytrapping #antispam #cybercrime #spamd #openbsd

  13. glancing at the #spamd log I see attempts like

    Sep 15 14:53:06 skapet spamd[85002]: (GREY) 103.120.44.85: <[email protected]> -> <[email protected]>
    Sep 15 14:53:06 skapet spamd[70382]: Trapping 103.120.44.85 for tuple 103.120.44.85 [103.120.44.85] <[email protected]> <[email protected]>

    I suspect another #wankstortion campaign but won't know for sure until something actually inboxes (unlikely) or enough shows up in the log itself. In the meantime, nxdomain.no/~peter/despicable_

  14. glancing at the #spamd log I see attempts like

    Sep 15 14:53:06 skapet spamd[85002]: (GREY) 103.120.44.85: <[email protected]> -> <[email protected]>
    Sep 15 14:53:06 skapet spamd[70382]: Trapping 103.120.44.85 for tuple 103.120.44.85 [103.120.44.85] <[email protected]> <[email protected]>

    I suspect another #wankstortion campaign but won't know for sure until something actually inboxes (unlikely) or enough shows up in the log itself. In the meantime, nxdomain.no/~peter/despicable_

  15. Have you been wondering why the list of imaginary friends at nxdomain.no/~peter/traplist.sh has been expanding quicker than usual this week?

    It's because I found another batch of old logs that are now getting the more thorough treatment (also see nxdomain.no/~peter/eighteen_ye or tracked bsdly.blogspot.com/2025/08/eig) #spamd #greytrapping #spam #cybercrime #openbsd

  16. Have you been wondering why the list of imaginary friends at nxdomain.no/~peter/traplist.sh has been expanding quicker than usual this week?

    It's because I found another batch of old logs that are now getting the more thorough treatment (also see nxdomain.no/~peter/eighteen_ye or tracked bsdly.blogspot.com/2025/08/eig) #spamd #greytrapping #spam #cybercrime #openbsd

  17. Hm. It looks like my publishing the "Eighteen years of greytrapping ..." retrospective nxdomain.no/~peter/eighteen_ye (bsdly.blogspot.com/2025/08/eig) has generated an uptick in digital archaeology. People are fetching the archived lists at a surprising rate. #greytrapping #spamd #openbsd #pf #packetfiltering #antispam #cybercrime #security

  18. Hm. It looks like my publishing the "Eighteen years of greytrapping ..." retrospective nxdomain.no/~peter/eighteen_ye (bsdly.blogspot.com/2025/08/eig) has generated an uptick in digital archaeology. People are fetching the archived lists at a surprising rate. #greytrapping #spamd #openbsd #pf #packetfiltering #antispam #cybercrime #security

  19. Aug 17 09:38:58 skapet spamd[36107]: (GREY) 141.98.10.53: <[email protected]> -> <[email protected]>
    Aug 17 09:38:58 skapet spamd[30363]: Trapping 141.98.10.53 for tuple 141.98.10.53 host-141-98-10-.domain <[email protected]> <[email protected]>
    Aug 17 09:38:58 skapet spamd[30363]: new greytrap entry 141.98.10.53 from <[email protected]> to <[email protected]>, helo host-141-98-10-.domain

    Yes, #greytrapping nxdomain.no/~peter/eighteen_ye #spamd #spam #cybercrime #openbsd #mail #security

  20. Aug 17 09:38:58 skapet spamd[36107]: (GREY) 141.98.10.53: <[email protected]> -> <[email protected]>
    Aug 17 09:38:58 skapet spamd[30363]: Trapping 141.98.10.53 for tuple 141.98.10.53 host-141-98-10-.domain <[email protected]> <[email protected]>
    Aug 17 09:38:58 skapet spamd[30363]: new greytrap entry 141.98.10.53 from <[email protected]> to <[email protected]>, helo host-141-98-10-.domain

    Yes, #greytrapping nxdomain.no/~peter/eighteen_ye #spamd #spam #cybercrime #openbsd #mail #security

  21. In 2013 I wrote up "Maintaining A Publicly Available Blacklist - Mechanisms And Principles" (also bsdly.blogspot.com/2013/04/mai) . TL;DR: blocklisting is a kind of public shaming, be sure your process is verifiable and transparent.

    Minor edits today, links to resources and #eurobsdcon inside. #blocklists #spamtraps #antispam #smtp #spamd #openbsd #freebsd #security #cybercrime

  22. In 2013 I wrote up "Maintaining A Publicly Available Blacklist - Mechanisms And Principles" (also bsdly.blogspot.com/2013/04/mai) . TL;DR: blocklisting is a kind of public shaming, be sure your process is verifiable and transparent.

    Minor edits today, links to resources and #eurobsdcon inside. #blocklists #spamtraps #antispam #smtp #spamd #openbsd #freebsd #security #cybercrime

  23. Following up on previous, the LinkedIn discussion revealed that there are people who have not heard about greylisting.

    So here is my 2012 piece with updates, "In The Name Of Sane Email: Setting Up OpenBSD's spamd(8) With Secondary MXes In Play - A Full Recipe" nxdomain.no/~peter/in_the_name

    #spamd #antispam #spamd.conf #OpenBSD #blocklists #blacklists #greytrapping #greylisting #spam

  24. Following up on previous, the LinkedIn discussion revealed that there are people who have not heard about greylisting.

    So here is my 2012 piece with updates, "In The Name Of Sane Email: Setting Up OpenBSD's spamd(8) With Secondary MXes In Play - A Full Recipe" nxdomain.no/~peter/in_the_name

    #spamd #antispam #spamd.conf #OpenBSD #blocklists #blacklists #greytrapping #greylisting #spam

  25. September 7, 2022 the 300,000th spamtrap was added to our list of imaginary friends, see "The Things Spammers Believe - A Tale of 300,000 Imaginary Friends" nxdomain.no/~peter/spammers_be.

    Today, the number at at nxdomain.no/~peter/traplist.sh rolled past 5,000,000 (yes, five million). #spam #spamtraps #spamd #openbsd #cybercrime #scams #malware

  26. September 7, 2022 the 300,000th spamtrap was added to our list of imaginary friends, see "The Things Spammers Believe - A Tale of 300,000 Imaginary Friends" nxdomain.no/~peter/spammers_be.

    Today, the number at at nxdomain.no/~peter/traplist.sh rolled past 5,000,000 (yes, five million). #spam #spamtraps #spamd #openbsd #cybercrime #scams #malware

  27. The symptoms of what I take to have been a #phishing campaign aimed at users in #japan are no longer that visible in the backscatter.

    But they will be visible as new #imaginaryfriends in the published #spamtraps list we user for our our #openbsd #spamd #graytrapping, see nxdomain.no/~peter/traplist.sh and nxdomain.no/~peter/spammers_be (with the total now inching in the direction of the 5 million mark)

  28. The symptoms of what I take to have been a #phishing campaign aimed at users in #japan are no longer that visible in the backscatter.

    But they will be visible as new #imaginaryfriends in the published #spamtraps list we user for our our #openbsd #spamd #graytrapping, see nxdomain.no/~peter/traplist.sh and nxdomain.no/~peter/spammers_be (with the total now inching in the direction of the 5 million mark)

  29. I interpret the following

    Apr 20 18:38:09 skapet spamd[52874]: (GREY) 117.53.153.22: <> -> <[email protected]>

    As a sign there are still, er, individuals out there who think SMTP callbacks were a good idea.

    Please have them read "Twenty-plus years on, SMTP callbacks are still pointless and need to die" (2017) nxdomain.no/~peter/twenty-plus

    #spam #spamd #smtp #callbacks #email #mail #antispam #cybercrime #shitheads #imbeciles #incompetence

  30. I interpret the following

    Apr 20 18:38:09 skapet spamd[52874]: (GREY) 117.53.153.22: <> -> <[email protected]>

    As a sign there are still, er, individuals out there who think SMTP callbacks were a good idea.

    Please have them read "Twenty-plus years on, SMTP callbacks are still pointless and need to die" (2017) nxdomain.no/~peter/twenty-plus

    #spam #spamd #smtp #callbacks #email #mail #antispam #cybercrime #shitheads #imbeciles #incompetence