OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: AOL reported spams from scompaol.net

From: Adam Jacob Muller (lists-postfixadam.gs)
Date: Mon Dec 11 2006 - 04:29:21 CST


SCOMP is just about useless, it boils down to the cluelessness of the
AOL population. For a vast majority of the AOL population, clicking
"junk mail" means "i don't want to get this anymore" even if it's a
100% legitimate opt-in email.

AOL also has no procedure for marking mails as legitimate opt-in
mailings (nor does anyone else though, but I don't see this issue
coming from SpamCop, whose warnings I take far more seriously).

Soo.. What I would probably do is to retain a few months worth of
logs from your postfix install (if you don't already) then when you
get some SCOMP, check it against maillog to see if you really DID
send it. if you did, the relevant portions of maillog are going to
help you figure out where it came from. If you didn't.....

-Adam

On Dec 11, 2006, at 3:45 AM, Daniel L. Miller wrote:

> I've been receiving a sizable number of messages that a supposedly
> bounced spam from MY server that AOL users are reporting. When I
> investigate the messages - they're obviously nothing that would
> have come from my people (unless one of my users' clients has been
> hacked, I suppose . . .)
>
> These look to me like they're coming from AOL - they pass the spf
> test. But I can't believe the volume of literally junk mail I'm
> receiving actually represents AOL user-reported spam. Is there a
> better solution than just blocking the "scompaol.net" sender?
>
> --
> Daniel
>
>