> A great document on helping with this problem is:
> 
> http://www.postfix.org/BACKSCATTER_README.html

This certainly can help, but my tests have shown that SA catches pretty
much all of this type of backscatter, anyway.  In fact, most of the
messages caught by this method would end up with an SA score above 20 in
our configuration.

> There is something going on.  We're seeing a ton of backscatter as
> well.  It seems that spammers are resorting to mass joe jobs, and
> have been doing so for a couple of weeks.  There were a couple of
> posts over on the SA list recently saying that some people are seeing
> this same thing in spite of publishing SPF records.  So while SPF may
> be a deterrent, it appears not to be much of one in this case.  I'm
> not quite sure what to do about it except wait for it to subside. 
> Anybody have any ideas?

Could the amavisd penpals feature be of some help here?  For inbound
NDRs, the original recipient of the NDR could be checked for a
corresponding outbound message from the original sender.  Without a
match, the SA score could be bumped a few points.  It seems that the
major challenge would be in identifying all of the different forms that
an NDR could take...


This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to