On Thu, Nov 30, 2006, Ira Abramov wrote about "Re: To: Ira / Warning: could not 
send message for past 10 hours (fwd)":
> > were. Who knows how many people do not get my email because of such 
> > things.
> 
> you should, unless you ignore bounces.
> 
> Sadly, I'm forced to ignore all bounces not originating by my own server
> since at least one if not more spammers are bombing the world with fake
> return addresses from abramov.org, ira.abramov.org and scso.com (and
> maybe others).

This is not a new phenomenon - several times in the past I've been bombarded
by bounces of spam and viruses which I supposedly wrote (but in reality,
obviously, someone faked my address as the sender of these messages).
At some points in time, I actually got more of these "spam bounces" than
real spams - sometimes hundreds a day.

It's not very hard to recognize these misdirected bounces, while still
receiving legitimate bounces. The key is that bounced mail contains the
"Message-id:" that you sent in your own mail; Since spammers do not
(currently) attempt to fake their Message-ids, you can recognize your
real bounces from fake ones.
For example, here is my procmail script which puts all "fake bounces" into
a folder "spambounces":

:0 BH:
*^from +MAILER-DAEMON[ @]
* !^Message-id: [EMAIL PROTECTED]
spambounces


-- 
Nadav Har'El                        |     Thursday, Nov 30 2006, 9 Kislev 5767
[EMAIL PROTECTED]             |-----------------------------------------
Phone +972-523-790466, ICQ 13349191 |What's the greatest world-wide use of
http://nadav.harel.org.il           |cowhide? To hold cows together.

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to