OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andreas Kisslinger (Andreas.Kisslingersoc-de.com)
Date: Tue Jan 16 2001 - 08:12:35 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    ...[spammer uses a valid address]...

    > So what? Spam is spam. If you were to discard it, you would also
    > discard valid email of that particular sender.
    > He would never know that his mail was sent to the bitbucket:
    > Rejecting the mail ist the way to go!

    In our case we're having a virtual entry "foodomain.com", the spammer
    was delivering the mail through the MX host (our provider) for this
    domain. So modifying /etc/postfix/access for the host was not possible.

    The spammer also used this address as From-address, so rejecting (as I
    did) bounces the mail back to the MX host and there the bounce was
    coming back to us.

    Think the following way:
    Spammer delivers through MX the following mail
    -----------------------
    MAIL FROM: Ralf.Hildebrandtinnominate.com
    RCPT TO: Ralf.Hildebrandtinnominate.com
    DATA
    From: Ralf.Hildebrandtinnominate.com
    To: Ralf.Hildebrandtinnominate.com
    Subject: Double-bounce

    wasted time and space
    .
    -----------------------
    What is the correct way to reject such a mail without getting the
    bounce?

    I've "delivered" this problem to our provider (discard every mail,
    coming from "foodomain.com" and going to "foodomain.com").

    best regards,
    Andy (using Postfix since a few months)

    PS: Removing this "foodomain.com" was not a valid way, because the
    address was in printed marketing material.

    --
    ******************************************************************
    Andreas Kisslinger        SOC Software Outsourcing Consulting GmbH
    Tel.:  +49.89/864913-41   Henschelstr. 3
    Fax:   +49.89/864913-86   D-81249 Muenchen
                              Germany
    mailto:Andreas.Kisslingersoc-de.com
    ******************************************************************