Zitat von Patric Falinder <patric.falin...@omg.nu>:
lst_ho...@kwsoft.de skrev 2010-11-24 11:08:Ok, thanks! Is there any other ways to protect yourself against backscatter? Other backscatter-lists etc.?Zitat von Patric Falinder <patric.falin...@omg.nu>:lst_ho...@kwsoft.de skrev 2010-11-24 10:22:Zitat von Patric Falinder <patric.falin...@omg.nu>:Hi, A colleague of mine gets a lot of weird Delivery Status Notifications, Failure Notice and Rejected messages. Yesterday she got 200 of them.. They all come from different servers and they are most from Russia and Japan and they are countries that we have no connection to at all. I've looked at the message headers and I can't figure out Why he receives so many messages.. All the mail-servers that send them to us have PTR-records so they look legit to me. They all come from MAILER-DAEMON and the content is pretty much rubbish. I attached a message with headers and everything, just changed the address for my colleague. Is there some way that I can block these kind of things? Is someone sending out spam using her email-address and when the receiving server can't deliver they send the notice to the real address?It's called "backscatter". Have a look here http://www.postfix.org/BACKSCATTER_README.html Maybe consider using the DNSRBL from http://www.backscatterer.org/ for the address affected, at least the server in your example is listed there. Regards AndreasThank you! I've never heard of backscatterer.org before so I will try that and see if it helps :)Be sure to limit the usage of the list to the affected account and maybe even to bounce sender addresses as a lot of legitim hosts are listed. See http://www.backscatterer.org/?target=usage Regards AndreasAnd how can I configure that only a specified address is going to check the backscatterer.org-list?
Have a look at smtpd_restriction_classes at http://www.postfix.org/RESTRICTION_CLASS_README.html
Regards Andreas
smime.p7s
Description: S/MIME Cryptographic Signature
