> I'm guessing that someone has a mis-configured spamtrap that they
> wound up bouncing one of these messages to. There seems to be a lot of
> misconfigured spamtraps out there...

Just to bring this up...

In my opinion any spamtrap whose address appears on a Web page is
misconfigured, unless you're really careful with it.

The reason is that the Klez virus and its variants like to scan the victim's
IE cache for addresses. So Klez sends out a bunch of messages, grabs your
spamtrap address for the "From" address, and the replies - including things
like out-of-office messages and majordomo confirmations - get reported as
spam.

Worse, for mailing lists that aren't double-opt-in, Klez can and does
subscribe your spamtrap to valid mailing lists.

If your spamtrap is set to send out replies to the spam it receives, it will
send replies to Klez messages, some of which have a mailing list address as
their From address, and get  subscribed to even more mailing lists. It can
even complete a double opt-in in some cases. Now not only does your spamtrap
report all of the list's messages to Razor, it also gleefully sends a reply
to each and every message on the list! Trust me, list admins love this.

After using a Web spamtrap for a couple of months I found all sorts of
innocent mailing lists piling up in the 'spam' corpus. So I dropped that one
and now only use old addresses and never-used addresses (spammers love to
guess) as spamtraps.

--
Michael Moncur  mgm at starlingtech.com  http://www.starlingtech.com/
"I think the world is run by 'C' students." --Al McGuire



-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility 
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to