I've just found a new and interesting spam source - legitimate bounce messages

[eculp at casasponti.net]

Yury Michurin <yury.michurin at gmail.com> escribió:

> Hello,
> start with putting spf record on the domain,
> http://www.netdummy.net/stop-bounce-mail.html
> and finish with filtering bogus message-id wich was not orignated on your
> server with whatever software you using.

I've had the spf record for a couple of years and I've started  
filtering.  I guess I was just looking for something different.

Thanks for helping me adapt to the real world.

ed

>
> Regards,
> Yury
>
> On Thu, Oct 16, 2008 at 4:01 PM, <eculp at casasponti.net> wrote:
>
>> In the last hour, I've received over 200 legitimate bounce messages from
>> email services as a result of someone having used or worse is using my email
>> address in spam from multiple windows machines and ip addresses.  The end
>> result is that I am getting the bounce messages.  I'm sure that others on
>> this list have experienced the problem and maybe have a solution that I
>> don't have.
>>
>> The messages are allowed through my obspamd/pf and pf smtp bruteforce
>> blocking rules because they are completely legit.
>>
>> I guess the work around is to filter them on incoming together with our
>> local bounce messaages util the spammers get tired of my address.
>>
>> Thanks for any suggestions,
>>
>> ed
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscribe at freebsd.org"
>>
>