So could you route an entry like: <[EMAIL PROTECTED]> = spambox
?? Just curious. I'd be interested if I could. Would take much less load than to re-deliver the bounce to a non-existent life form. Thanks! Chris > From: Global Homes Webmaster <[EMAIL PROTECTED]> > Reply-To: "SIMS Discussions" <[EMAIL PROTECTED]> > Date: Mon, 3 Nov 2003 10:45:33 -0800 > To: "SIMS Discussions" <[EMAIL PROTECTED]> > Subject: Re: forged return path question > > On 11/03/03 at 10:24, Neil Herber wrote: > >> Some Russian spammer (well, someone sending spam to Russia) is using >> my primary email address as the forged return path on their junk. As >> a result I am getting bounces coming from Russian mail servers. Is >> there any way I can bounce them? >> >> Note that I already have *.ru routed to ERROR, but the return path on >> the bounces is empty, as in <>, so the mail gets through. > > <> ([EMAIL PROTECTED]) is the proper return path for all bounce messages, so what > you're seeing is normal. > >> I suppose I could blacklist the servers as I identify them or just >> resort to the shotgun approach and use the russia.blackholes.us >> RBLDNS. > > That's probably about the best you can do. All I ever get from Russian > hosts is spam, so I blacklist them without hesitation. On the other hand, I > don't get enough to justify the overhead of checking russia.blackholes.us > for each and every incoming SMTP connection. So, for the moment at least, > any Russian hosts are added manually to my local blacklist. > > In your case, though, blacklisting locally is not likely to help you very > much. By the time you get a bounce from a particular host, the spam with > forged Return-Path has already hit it and you're probably not going to see > any more bounces from the same host, so blacklisting it is probably fairly > pointless. You could add russia.blackholes.us to your RBL server list > temporarily and then watch your logs to see when rejections based on it > drop off. > > -- > Christopher Bort | [EMAIL PROTECTED] > Webmaster, Global Homes | [EMAIL PROTECTED] > <http://www.globalhomes.com/> > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[EMAIL PROTECTED]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
