On Fri, Jan 21, 2011 at 09:12:32AM +0100, Mikael Bak wrote: > Reindl Harald wrote: > > Am 20.01.2011 12:29, schrieb Christian Roessner: > > > >> Why adding a contact form? If a postmaster really does > >> his/her job and scans the logs, finds your assistance info > >> and enters the website, don't you think the same admin is > >> also able to write a mail to you (postmaster@...)? > > > > Because if his server is rejected you will also not receive > > this mail > > You can have rules on your mx letting in email for postmaster > and abuse addresses. I think that's quite common. We do that.
When I did that, I found that the postmaster address was receiving bucketloads of spam every day, and maybe 2-3 legitimate mails per YEAR. Now my postmaster address is protected by Zen and basic HELO checks. But indeed, this gives me an idea: rather than a contact form, I might try a form which generates a limited-use non-blocked address. The next hurdle: how to present it in a way such that the end user can see/use it, and yet protect it from harvesting bots? -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header