OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
What To Do About Fake Addresses?

From: KashMaster (kashmastersbcglobal.net)
Date: Mon Oct 01 2007 - 09:49:33 CDT


This question seems to have been answered many times and in various
ways... in fact, so often that there is such an overabundance that it
is difficult to winnow the wheat from the chaff. Consequently, I am
seeking your opinions both in general and specifically with regard to
postfix.

To expand on the subject line: I was greeted (?) this morning by a
mailbox of several thousand "mail failure" notices from servers all over
the world. Without exception, these represented rejected spam (either
caught by a spamguard or sent to a bad address) that had various
non-existent return addresses at one of my domains.

These were forwarded to a specific mailbox which I set up for unknown
recipients... seemed like a good idea at the time, but obviously there
are drawbacks.

No doubt the general subject lines can be filtered (and in fact, as this
has happened before, a few thousand of them were filtered to "rejected"
mailbox), but the more important question to my mind is whether there is
something better (or additional) to do that would let the sender know
that the return address was faked and did not originate from this domain?

Thanks for your thoughts on the matter.