On 1/13/2011 4:35 AM, Tom Kinghorn wrote:
Good afternoon list.
We have a problem of a number of our clients which appear to
have been affected by malware/bots.
these clients use our servers as a smarthost.
The messages are similar, so creating a spam filter for
spamassassin has been done.
I have noticed that the sender is either a gmail, yahoo or
att.net address.
Sender verification checks are passing as these providers
appear to have accounts setup for the random senders and are
accepting mail.
Is there a way to discard the bounce backs for these forged
senders?
Yahoo has blocked us due to the large number of mails sent,
which i am assuning is the bounce backs.
your help is appreciated.
many thanks
Tom
Once the cows get out, you can spend days rounding them up and
some may never be found. Better to keep the gate closed.
Corollary: Don't accept mail you can't deliver.
-- Noel Jones
