Hi Michael > This has been going on for some time now, there was discussion on > this list regarding the topic, we ended up putting a policy in our > platforms just to deal with this issue. "Reject messages from senders > forging bounce messages".
So you just drop everything with envelope sender <> from 207.46.0.0/16? Or how did you solve the issue? PS: I just sent Michael Wise instructions how to generate a 51KB bounce to an unrelated and SPF protected victim email account with a ~500 byte email by 'using' an Outlook 365 Server. Amplification factor 100X. I hope he is the right guy to look into this. -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
