[MAD-SAGE] spam

[Jeremy 'Circ' Charles circ@xxxxxxxx]

In case anyone has already invented this wheel or has learned why we
shouldn't do it...

My employer's site seems to be under a spam attack that has been going in
spurts since about 8pm last night.  I've gotten over 1200 double bounce
messages ("user unknown" being sent back to an invalid address) since that
time, with more coming in as I type.

It seems that the MAIL FROM address on these turkeys all match this
expression:

	^[a-z][a-z][0-9][a-z][a-z][0-9][0-9]@

I assume there's some way to get in to sendmail's rulesets to reject
anything that matches this.  Is there anyone on the list who has already
done something like this and wouldn't mind sharing the recipe?

Also, if anyone knows where on the sendmail web site to find the docs on
this, I'd appreciate a link as well..  So far my stumbling through hasn't
yielded anything useful.