On Tue, 13 May 2008, Matus UHLAR - fantomas wrote:
On Tuesday 13 May 2008 15:17:29 Matus UHLAR - fantomas wrote:
On 12.05.08 21:49, Arvid Ephraim Picciani wrote:
http://rafb.net/p/q3eZwd93.html
anyone can see any sense in it? it uses my hostname to fake a bounceback
that claims i sent a message to another faked address, while all doing
that from a dialup. what's the point of that? testing spambots?
from the SA FAQ
(http://wiki.apache.org/spamassassin/FrequentlyAskedQuestions):
# I'm getting a lot of "backscatter" / bounce messages / undeliverable
email notices / etc. regarding mail I didn't send. How can I block them?
http://wiki.apache.org/spamassassin/VBounceRuleset
On 13.05.08 15:17, Arvid Ephraim Picciani wrote:
It's not backscatter. Please see read the message again, you'll see that it
actually _pretends_ to be backscatter.
I'm just asking here becouse i wondered why somone would do that.
I've looked at it and I've (probably) missed it (again). Why do you think
that it pretends to look like backscatter, and why do you think it is not?
Not to put words in anyone else's mouth, but I think what sets the
recent incidents apart from backscatter is one of intention.
Backscatter is the unintended blowback of spams sent out with forged
From addresses where the intention is to deliver spam directly to a
victim.
This new phenomenon, which I've been referring to as bounce spam (or
maybe bounced spam) reverses the intentionality. That is, bounce spam
is intentionally sent to "misconfigured" servers that are known to
bounce rather than reject, in which the forged From address is the
intended victim. The fact that it's a bounce is just another way of
eluding spam filters.
In other words, backscatter is a by-product of spamming, while bounced
spam is the product itself.
--
Public key #7BBC68D9 at | Shane Williams
http://pgp.mit.edu/ | System Admin - UT iSchool
=----------------------------------+-------------------------------
All syllogisms contain three lines | [EMAIL PROTECTED]
Therefore this is not a syllogism | www.ischool.utexas.edu/~shanew
