OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Tarpit "User unknown in local recipient table"?

From: Adhamh Findlay (postfixadhamh.com)
Date: Sun Jul 02 2006 - 13:34:17 CDT

On Sun, 02 Jul 2006 14:06:26 +0200, mouss <usebsdfree.fr> wrote:
>>
>>
> As sandy said, this is more probably a joe job attack. addresses from
> your domains are used as sender in spam/virus/whatever mail, and the
> recipient domain is misconfigured, and does backscatter. There are
> unfortunately many broken sites.
>
> what you can do is add a trap address and make some or all of these
> "unknown" addresses virtual aliases for this trap. Then look at the mail
> to see if it is really backscatter. If so, report them to spamcops.
> depending on the situation, you may also complain to the abuse contact
> and to whois contacts of the misconfigured clients.

I tired to do this with luser_relay, but I didn't get any of these messages delivered to the relay account. Did you have a different setup in mind?

Is there anything besides my SPF record I can do to help prevent this joe job attach leading to my domain getting blacklisted?

Thanks,

Adhamh