On 11/03/03 at 10:24, Neil Herber wrote:
> Some Russian spammer (well, someone sending spam to Russia) is using
> my primary email address as the forged return path on their junk. As
> a result I am getting bounces coming from Russian mail servers. Is
> there any way I can bounce them?
>
> Note that I already have *.ru routed to ERROR, but the return path on
> the bounces is empty, as in <>, so the mail gets through.
<> ([EMAIL PROTECTED]) is the proper return path for all bounce messages, so what
you're seeing is normal.
> I suppose I could blacklist the servers as I identify them or just
> resort to the shotgun approach and use the russia.blackholes.us
> RBLDNS.
That's probably about the best you can do. All I ever get from Russian
hosts is spam, so I blacklist them without hesitation. On the other hand, I
don't get enough to justify the overhead of checking russia.blackholes.us
for each and every incoming SMTP connection. So, for the moment at least,
any Russian hosts are added manually to my local blacklist.
In your case, though, blacklisting locally is not likely to help you very
much. By the time you get a bounce from a particular host, the spam with
forged Return-Path has already hit it and you're probably not going to see
any more bounces from the same host, so blacklisting it is probably fairly
pointless. You could add russia.blackholes.us to your RBL server list
temporarily and then watch your logs to see when rejections based on it
drop off.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
