Francoise: Thanks for the heads-up. I checked my logs and did indeed find a bunch of spam attempts. I've filtered them per your recommendation. Question - would these repeated hits from this spammer be creating some system overhead even with the filter in place? I ask because my listserv box now seems a little slow about responding to admin requests via the web, and I'm wondering if I need to put in place some even more aggressive filtering before it even gets to listserv. (Where, I'm not sure.) Thanks, Tracey At 05:50 PM 11/28/2001 -0500, you wrote: >I would like to make a recommendation to all you LISTSERV site admins >out there. > >A certain site appears to be generating spam to LISTSERV lists >everywhere at such an alarming rate that just the X-SPAM notices that >we are receiving from all the networked sites are coming in so fast >that they come close to constituting a DOS attack. > >I don't want to name names in a public forum, in case the site in >question is doing it unknowingly due to some virus or something like >that. What I recommend is that you do a search/find/grep/whatever in >your LISTSERV log file looking for lines such as: > >28 Nov 2001 06:34:47 From [log in to unmask]: X-SPAM >[log in to unmask] F1A6AAE6 > >If you find an XXXXXX that is showing up a lot in the log, you may >want to add the following to your site configuration file: > >FILTER_ALSO= %FILTER_ALSO% XXXXXX.COM > >(this is the NT/Win2K format for the site.cfg file -- if you're >running a different OS, please use the appropriate format) > >to stop the messages in their tracks, rather than generating new spam >warnings each time a message comes in. > >Francoise