> Unless the spammer is actually using the mail account (IE has the > password for it), the only actions you can take are > non-technological (IE convincing or forcing the spammer to stop, > using whatever creative methods you can come up with).
One still-technological method that is *fairly* sound is using a Combo Rule to filter out messages that are (1) from '<>' or '<MAILER-DAEMON>' AND (2) do NOT contain a known token such as the EHLO name of the user's MUA (you will have to research this). The concept is that, within the Postmaster message, in the original, bounced RFC822 header text (which may or may not be in its own MIME part), only a message originating from the user's station will be properly tokenized. (Of course, this is readily trollable and forgeable, but most spammers would not have any call to do this that I know of.) It would be even cooler to tokenize a non-standard x-header of each e-mail at the server using a hash of the user's e-mail (Scott?)--with weekly expiry or something to make it even harder to abuse. -Sandy Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
