> On 8/25/2016 9:59 AM, Glenn English wrote: >> Why do I get mail to names like dcpczy3foku+gcyvikdnlcei? >> >> They're not a lot of them, but they show up every few days, and I can't >> think why anybody'd do this. At first I thought somebody was trying to >> access their bot, but Postfix rejects them after a quick look at >> /etc/passwd...
> That's probably a Message-ID: some spammer scraped from the > internet. Not really worth any action from you... No. It's Not. Here's the deal. It's a test of your mail system. If the message is 250'd at the edge, that tells the attacker that you have a catch-all, and address harvesting is pointless. But they might come back tomorrow to see if you've changed your mind. If the message is 5xx'd at the edge, that tells the ATTACKER that you do NOT have a catch-all address, and the real attack will commence almost immediately. And in earnest. Aloha mai Nai`a. -- " So this is how Liberty dies ... http://kapu.net/~mjwise/ " To Thunderous Applause.
