On Fri, 18 Jun 2004, Joe Arnstein wrote:

I've been noticing a lot of spam coming in with characters in the "from" address that don't work or are likely to be forged. These cause a backup in our outbound queue (lots of NDRs) so I'd rather they be rejected right off the bat.

from=<[EMAIL PROTECTED]>
from=<Puri|[EMAIL PROTECTED]>
from=<Rauly|[EMAIL PROTECTED]>
from=<[EMAIL PROTECTED]>
from=<80/[EMAIL PROTECTED]>
from=<A/[EMAIL PROTECTED]>

Do any of the rfc's say this is improper syntax or forbiden characters? Should I block this? Can I block it? And if so can someone recommend a good way to do it?

Anthony Howe's milter-spamc rejects such things with "553 5.1.[37]" errors. I've never looked at his code, but it seems to work decently on my home mail server (which doesn't need mimedefang's flexibility).


--Paul Heinlein <[EMAIL PROTECTED]>
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to