On Feb 4, 2009, at 8:59 AM, Matthias Andree wrote:
Am 04.02.2009, 14:42 Uhr, schrieb jeff donovan
<dono...@beth.k12.pa.us>:
Greetings
i have a user who is getting a ton of postmaster bounces. who or
what ever is spamming is using her address as the return reply, so
all the bounces and postmaster warnings are coming back to her and
filling up her account.
how can I alleviate this? I can't seem to get a handle on where
it's coming from.
Have you read BACKSCATTER_README yet? If not, I'd recommend it, it
has some pointers on where to start.
Run the command "postconf readme_directory" to find the directory
that is supposed to contain said document on your system.
--
Matthias Andree
greetings and thanks for the reply.
yes, I read the http://www.postfix.org/BACKSCATTER_README.html
and it looks like this is just what I need. before I place a header or
body check i want to make sure i'm blocking it correctly.
are the sample body checks going to wrk in my case ?
thanks
-jeff
here is a sample of the bounce: I have modified the real users name.
Viewing Full Header - View message
Return-Path: <financecouncil-ow...@john23.com>
Received: from murder ([unix socket])
by imap1.beth.k12.pa.us (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Wed, 04 Feb 2009 08:21:51 -0500
X-Sieve: CMU Sieve 2.2
Received: from smtp2.beth.k12.pa.us (smtp2.beth.k12.pa.us [10.135.1.8])
by imap1.beth.k12.pa.us (Postfix) with ESMTP id 7C6C214F7845
for <realusern...@beth.k12.pa.us>; Wed, 4 Feb 2009 08:21:51
-0500 (EST)
Received: from localhost (mx1.beth.k12.pa.us [10.135.1.6])
by smtp2.beth.k12.pa.us (Postfix) with ESMTP id 0D714F3AA34
for <realusern...@beth.k12.pa.us>; Wed, 4 Feb 2009 08:24:00
-0500 (EST)
Received: from mx1.beth.k12.pa.us ([127.0.0.1])
by localhost (mx1.beth.k12.pa.us [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 08743-07 for <realusern...@beth.k12.pa.us>;
Wed, 4 Feb 2009 08:25:03 -0500 (EST)
Received: from mail2.beth.k12.pa.us (mail2.beth.k12.pa.us
[192.227.0.10])
by mx1.beth.k12.pa.us (Postfix) with ESMTP id 7065953ED5D4
for <realusern...@beth.k12.pa.us>; Wed, 4 Feb 2009 08:25:02
-0500 (EST)
Received: from john23.com (john23.com [216.117.171.26])
by mail2.beth.k12.pa.us (Postfix) with ESMTP id 3BA40811002
for <realusern...@beth.k12.pa.us>; Wed, 4 Feb 2009 08:23:52
-0500 (EST)
Date: Wed, 4 Feb 2009 08:23:51 -0500
Message-Id: <20090204082351236.aa72e1c...@john23.com>
From: financecouncil-ow...@john23.com
To: realusern...@beth.k12.pa.us
Subject: Article rejected, un-authorized poster of realusern...@beth.k12.pa.us
X-Spam-Status: No, hits=0.537 tagged_above=-999 required=5
tests=ADDRESS_IN_SUBJECT, BAYES_00, NO_REAL_NAME
X-Spam-Level:
Article rejected, un-authorized poster of realusern...@beth.k12.pa.us
Received: from XDYHONJUP [189.22.134.132] by john23.com with ESMTP
(SMTPD32-8.00) id A6C57D10052; Wed, 04 Feb 2009 08:23:17 -0500
Received: from 189.22.134.132 by mail2.beth.k12.pa.us; Wed, 4 Feb 2009
11:22:50 -0300
Date: Wed, 4 Feb 2009 11:22:50 -0300
From: "Leann Norris" <51dzoxaw0...@beth.k12.pa.us>
X-Mailer: The Bat! (v3.5.25) Professional
Reply-To: realusern...@beth.k12.pa.us
X-Priority: 3 (Normal)
Message-ID: <>
To: dde...@john23.com
Subject: Crazy sale prices hmf kqqpoaxd
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------5EE5E1DDB4291CD2"
------------5EE5E1DDB4291CD2
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
http://lineyakiq.cn
Get beautiful women easily
- Get the desired act duration
- Get hard-on of one passing thought
- Make your activity last more
------------5EE5E1DDB4291CD2
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>
<a href="http://lineyakiq.cn";>
<b><i>http://lineyakiq.cn</b></i>
</a><br><br>
<font size="3" face="Comic Sans MS"><b>Get beautiful women easily</b></
font><br><br>
<font size="2" face = "verdana">
- Get the desired act duration<br>
- Get hard-on of one passing thought<br>
- Make your activity last more<br></font>
</BODY></HTML>
------------5EE5E1DDB4291CD2--
