On 23.04.2006 12:59, postmaster - networkoftheapes.net wrote: > Some user ([EMAIL PROTECTED]) is trying to claim > mail.networkoftheapes.net as it's client domain. Since I know they can't > be, I exit with a 19 failing the message and stopping filter processing. I > also give them a "550" invalid user formatted message with the .rej file. > So far, it's blocked a bunch of these and all seem to be from junk hotmail > addresses. One of my spam honeypot accounts dropped it's mail load per hour > by about half with this and 'friend' filtered out. > > I suspect that some widely used spam software out there just mimics the mail > server's domain and supplies an randomly generated hotmail address for the > from field. I sent some mail from a valid hotmail account and it reported > "hotmail.com" as the client domain, so I think the false-positive count > will be nil.
Yes, that's common behavior of spammers. Software like SpamAssassin counts that as spam as well. Some MTA's directly just say "That is my HELO, not yours" - I guess that could by a nice native feature of XMail, too ;-) - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
