> OK, so this customer wants to create havoc, and send out thousands > of emails and include my email address ([EMAIL PROTECTED]) in the > reply to/mailed from fields.
This is called a Joe Job. Google it. There is essentially nothing that can be done to stop it, except publishing SPF records for your domain (but this will only help if the recipients of the messages check for and kill/reject on SPF failure). Joe Jobs are most often done for brief periods by spammers in hopes of whitelisting. JJs are, surprisingly, not used that often for purely malicious purposes (i.e. by known assailants), since most such persons do not own enough machines for a sustained attack that can't be traced to them, while spammers do, through their zombie army (side note: though most film critics credit 9/11 and wartime anxiety for the recent plethora of zombie films, has anyone suggested that it's actually the spam zombies that have created this cultural moment?). No settings within your MTA configuration have any effect on other MTAs' willingness to accept forged mail from a valid address. Only public data such as SPF, which is carried in DNS records, will be usable. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
