This isnt backscatter though.  The only message body is the spam, no info
about bouncing at all.  Im familiar with the backscatter as my users:
[EMAIL PROTECTED] really gets a ton of it (duh).

This is just spam coming in from nobody with 2 from lines and a body that is
pure junk, not mailer daemon info.



on 1/5/06 4:48 PM, Matt Kettler at [EMAIL PROTECTED] wrote:

> [EMAIL PROTECTED] wrote:
>> This is slightly off topic, but im sure everyone here might have thoughts on
>> it.
>> 
>> I have over 9300 instances of empty "from" lines so far this week, for
>> example:
>> 
>> Jan  5 16:36:46 mail sendmail[7568]: k05LajgX007568: from=<>, size=1578,
>> class=0, nrcpts=1, msgid=<VIEQUES>, proto=SMTP, daemon=MTA,
>> relay=pool-151-197-121-196.phil.east.verizon.net [151.197.121.196]
>> 
>> These messages turn out to be like this:
>>> From MAILER-DAEMON  Thu Jan  5 16:36:46 2006
>> From: Mable Hollis <[EMAIL PROTECTED]>
>> To: [EMAIL PROTECTED]
>> Subject: [SPAM (29.3)] Re: hi hi
>> 
>> As you can see, spamassassin takes care of it pretty well, but if I can
>> block the emails before the MTA, I should be better off, right?  Anyone have
>> any thoughts?
> 
> http://www.google.com/search?hl=en&lr=&q=backscatter+email&btnG=Search
> 



Reply via email to