Re: [mailop] back blowing backscatter

2025-02-04 Thread Doug via mailop
On 2025-02-03 05:44, Hans-Martin Mosner via mailop wrote: I usually report them via Spamcop That worked really well. It felt weird reporting them as spam to spamcop, but it worked. Thanks for the tip! ___ mailop mailing list mailop@mailop.org https:

Re: [mailop] back blowing backscatter

2025-02-03 Thread Grant Taylor via mailop
On 2/3/25 3:41 AM, Doug via mailop wrote: What is The Way™, if any, to deal with backscatter? Take a look at milter-null from SirWumpus / Anthony Howe / SnertSoft: Link - SirWumpus / milter-null - https://github.com/SirWumpus/milter-null milter-null works by adding a header to outgoing messa

Re: [mailop] back blowing backscatter

2025-02-03 Thread Marco Moock via mailop
Am 03.02.2025 um 04:41:00 Uhr schrieb Doug via mailop: > It's backscatter from a phishing campaign. At first, I tried to > contact the server owner through their abuse@ account. They have us > blocked for ... "sending spam". (is this characteristic? do > blocklists not do SPF verification? can som

Re: [mailop] back blowing backscatter

2025-02-03 Thread Hans-Martin Mosner via mailop
I usually report them via Spamcop and add their IPs and/or domain names into our local blocklist. If this causes issues with legitimate mail from them, they can use the link that we give in every SMTP error reply to contact us. I just don't have time to educate mail ops who didn't request it. C

[mailop] back blowing backscatter

2025-02-03 Thread Doug via mailop
About 24 hours ago, I started receiving hundreds of "failure notice" emails from an external mailer daemon. I was concerned that this was due to some kind of compromise on my server. It was not - nothing weird with logins or anomalous IPs or anything that would indicate compromise on our end.