That would be a good feature. I did it with the pre-data filter to avoid SpamAssassin ever having to touch it and avoid Xmail having it frozen like I do to other spam.. With any luck, some spammers will even believe the 550 error.
Bryn ----- Original Message ----- From: Sönke_Ruempler <[EMAIL PROTECTED]> To: [email protected] Date: Sun, 23 Apr 2006 13:08:35 +0200 Subject: [xmail] Re: "friend" client domain > > On 23.04.2006 12:59, postmaster - networkoftheapes.net wrote: > > > Some user ([EMAIL PROTECTED]) is trying to claim > > mail.networkoftheapes.net as it's client domain. Since I know they can't > > be, I exit with a 19 failing the message and stopping filter processing. > I > > also give them a "550" invalid user formatted message with the .rej file. > > So far, it's blocked a bunch of these and all seem to be from junk > hotmail > > addresses. One of my spam honeypot accounts dropped it's mail load per > hour > > by about half with this and 'friend' filtered out. > > > > I suspect that some widely used spam software out there just mimics the > mail > > server's domain and supplies an randomly generated hotmail address for > the > > from field. I sent some mail from a valid hotmail account and it > reported > > "hotmail.com" as the client domain, so I think the false-positive count > > will be nil. > > Yes, that's common behavior of spammers. Software like SpamAssassin > counts that as spam as well. Some MTA's directly just say "That is my > HELO, not yours" - I guess that could by a nice native feature of XMail, > too ;-) > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
