Steve Jenkins:
> Hi, Wietse. Thanks for the speedy reply. I'm a big fan of Postfix, so first
> of all, thank you for developing such a great product. I cringe thinking
> about the days when I used to have to run Sendmail (shudder).
>
> Ok... so let me see if I understand what is happening on my server.
>
> 1) SpamCo forges a message from innoc...@victim.com and sends it to
> mya...@familyname.com
>
> 2) My server (familyname.com) accepts the message because mya...@familyname
> is a valid recipient that appears in my virtual aliases file, then forwards
> the message (based on the info in that virtual aliases file) to my aunt's
> actual email address of auntiemildredloveskitt...@cox.net
>
> 3) Cox.net rejects the mail because it's SPAM and sends it back to the
> spoofed "sender": innoc...@victim.com, basically saying "your message to
> mya...@familyname.com was rejected because of xyz reason"
Cox rejects the message; YOUR box sends it back to an innocent person.
Wietse
