I will quit with the top posting in an already bottom posted thread, I suppose. > David said: > >> If we knew that all outbound email went through ASSP (no relaying) >> > > ? ASSP is not an MTA - it *must* relay all outbound mail through an MTA. > > What I meant was if ASSP has logs of the outgoing mail that it proxies to my MTA, instead of a user using his ISP's SMTP server (which we prevent by not allowing relaying and using smtp auth), then it would be decently easy to check to see if we actually did send the mail that is causing us to get the backscatter. The backscatter I'm referring to is not only non-existent users, but also vacation/auto-responders, challenge/verify emails, ISP Spam notices and others. While technically not spam, nor an NDR, why would I want to know that Clarice is out of the office if I never emailed her in the first place? Some crafty reg-ex's might help ASSP identify these and check them against the log of recently delivered messages.
> David said: > >> then one might be able to compare the recipient on backscatter >> messages to the recipient on messages actually sent out, which would >> be one way of "verifying" backscatter messages. Unfortunately message >> IDs and other things we put in the headers aren't going to come back >> to us on the rebound, so those are useless. >> > > You are fighting the wrong problem. The problem is apparently that ASSP > is not verifying recipients. > > Fix that first. Then find the best way to simply reject/blackhole > any/all DSN messages that are not *generated* by your SMTP server(s) and > that should solve the problem. > > Unless I'm completely missing something... > > Obviously the easiest way to cut down on 98% of backscatter is to turn on recipient validation, but for the times when a spammer has used your actual, valid email address, this is when alternative remedies must be explored. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
