Hi,

I know this is a sendmail group but a lot of you use procmail and I need
some help in a hurry if I can get it.

My domain evidently got "joe jobbed" yesterday, and my customers are getting
hundreds of MAILER-DAEMON type messages. Needless to say, they are not
happy.

I figured I could use procmail to temporarily discard MAILER-DAEMON messages
until whatever's going on stops. I don't know much about writing procmail
recipes, but I can google for them. I've tried a variety of things in
/etc/procmailrc, but none are working - MAILER-DAEMON messages are still
being delivered to mail boxes. This is what I've tried:


:0:
* ^FROM_MAILER
/dev/null

:0:
* ^from.*mailer.*daemon
/dev/null

:0:
* ^From:.*MAILER.*DAEMON
/dev/null


:0:
* ^TO_[-a-z0-9_]+\ [at] mydomain
* ^From:.*MAILER-DAEMON
/dev/null

What am I doing wrong, and is there a better way than this to deal with the
back scatter fromn this joe job?

Thanks,

Lisa Casey

Lisa Casey wrote:
> Hi,
>
> I know this is a sendmail group but a lot of you use procmail and I need
> some help in a hurry if I can get it.
>
> My domain evidently got "joe jobbed" yesterday, and my customers are getting
> hundreds of MAILER-DAEMON type messages. Needless to say, they are not
> happy.
>
> I figured I could use procmail to temporarily discard MAILER-DAEMON messages
> until whatever's going on stops. I don't know much about writing procmail
> recipes, but I can google for them. I've tried a variety of things in
> /etc/procmailrc, but none are working - MAILER-DAEMON messages are still
> being delivered to mail boxes. This is what I've tried:
>
>
> :0:
> * ^FROM_MAILER
> /dev/null
>
> :0:
> * ^from.*mailer.*daemon
> /dev/null
>
> :0:
> * ^From:.*MAILER.*DAEMON
> /dev/null
>
>
> :0:
> * ^TO_[-a-z0-9_]+\ [at] mydomain
> * ^From:.*MAILER-DAEMON
> /dev/null
>
> What am I doing wrong, and is there a better way than this to deal with the
> back scatter fromn this joe job?
>
> Thanks,
>
> Lisa Casey
>
>

Well you could always use /etc/aliases and define:
mailer-daemon: /dev/null

which would send *any* mailer-daemon emails to /dev/null

Hi Scott,

>
> Well you could always use /etc/aliases and define:
> mailer-daemon: /dev/null
>
> which would send *any* mailer-daemon emails to /dev/null

I figured that out after posting this. Thanks.

Lisa