On Tue, 2003-08-12 at 20:07, Bob Apthorpe wrote:
> On Tue, 12 Aug 2003, Scott Fraser wrote:
> 
> > Good Morning Folks,
> >     Well, after fighting with it longer than I care to admit, I do believe
> > I now have a working Postfix/SpamAssassin/Amavisd system. What I am
> > trying to do now, is configure the system wide (and eventually on a per
> > user basis) a way to bounce mail. Currently email that is spam is just
> > flagged. Our president wants to bounce it.
> 
> Has someone explained to him what a horrible idea this is? Spam is usually
> forged to look like it came from a non-existant or innocent address and
> bouncing the spam just adds to network burden and implicit
> denial-of-service attacks on those whose addresses are forged into the
> mail.
> 
> Want samples? I've got a pile of bounces from broken mail systems
> resulting from spammers forging my address into their spew. Twice in three
> weeks. Please reconsider becoming part of the problem.

Not to mention that you may be bouncing the spam to another of your
users. I'm seeing a lot of spam on one of my customers' servers where
the from address is forged as another user at that domain, its a
deliberate tactic designed to exploit the system you propose.

forged from [EMAIL PROTECTED] to [EMAIL PROTECTED]
forged from [EMAIL PROTECTED] to [EMAIL PROTECTED]
...
forged from [EMAIL PROTECTED] to [EMAIL PROTECTED]

-- 
Yorkshire Dave


-- 
Scanned by MailScanner at wot.no-ip.com



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to