OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Blocking mail from=<>

From: /dev/rob0 (rob0gmx.co.uk)
Date: Sun Feb 27 2005 - 10:16:08 CST


On Saturday 26 February 2005 23:37, Forrest Aldrich wrote:
> However, I see tons of probes to our gateway from various places such
> as AOL, Verizon,

Speak not ill of AOL! AOL are the Good Guys. They are the biggest,
whitest hat ISP in terms of fighting email abuse. I think you are
incorrect. I have users who correspond with aol.com, and no such
probes occur here.

Verizon, sure. They're terrible. Speak ill, at will. :)

> and the like that submit FROM <> and to
> SomeRandomWord. I've not figured out WHY this is happening, it's
> relatively benign in most cases.

Sender address verification, most likely, like the Postfix verify(8)
server. Verizon DOES do this. General consensus on SPAM-L, as noted in
ADDRESS_VERIFICATION_README.html#limitations, is that verification
probes are a form of abuse.
--
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header