> I'm getting a lot of email where one of the domains I host has been used
> by a spammer to send emails to [EMAIL PROTECTED] which then gives me
> a load of bounce backs of "user unknown" and the like. (see below.)
> 
> Is there a way to block these out, without blocking out legitimate
> undelivered reports from mailservers? (or do my users have to just put
> up with it!!)

Welcome to the hardest part of spam filtering: backscatter & co.

Not easy to stop, especially then the spammer if forging a valid username
and you get thousand of bounces, but you can help mitigate a lot the problem
using bombregex

Read this guide for postfix, you'll find some valuable info
http://www.postfix.org/BACKSCATTER_README.html


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to