Re: user getting spoofed

2009-02-24 Thread Noel Jones
jeff donovan wrote: On Feb 20, 2009, at 12:18 PM, Noel Jones wrote: jeff donovan wrote: On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: You should see the REJECT please... from Noel's example in the logs. J.P. got it working. You can also # grep 'reject: .*backscatterer' /var/log/mai

Re: user getting spoofed

2009-02-24 Thread jeff donovan
On Feb 20, 2009, at 12:18 PM, Noel Jones wrote: jeff donovan wrote: On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: You should see the REJECT please... from Noel's example in the logs. J.P. got it working. You can also # grep 'reject: .*backscatterer' /var/log/maillog to see how your

Re: user getting spoofed :; update ::

2009-02-24 Thread jeff donovan
On Feb 20, 2009, at 11:51 AM, Noel Jones wrote: jeff donovan wrote: okay,.. no errors in logs I beg to differ... Just not the errors you've looked for. I am now the proud recipient of a million of these. all from different domains. Transcript of session follows. Out: 220 mail2.beth.k12.

Re: user getting spoofed

2009-02-20 Thread Noel Jones
jeff donovan wrote: On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: You should see the REJECT please... from Noel's example in the logs. J.P. got it working. You can also # grep 'reject: .*backscatterer' /var/log/maillog to see how your RBL is working. Feb 20 11:07:51 mail2 postfix/

Re: user getting spoofed

2009-02-20 Thread Noel Jones
jeff donovan wrote: On Feb 19, 2009, at 10:39 AM, Noel Jones wrote: You can use the ips.backscatterer.org to reject bounces (*NOT* all mail) from known backscatter sources. Do this in smtpd_data_restrictions for compatibility with sender address verification. # main.cf smtpd_data_restrictio

Re: user getting spoofed :; update ::

2009-02-20 Thread Noel Jones
jeff donovan wrote: okay,.. no errors in logs I beg to differ... Just not the errors you've looked for. I am now the proud recipient of a million of these. all from different domains. Transcript of session follows. Out: 220 mail2.beth.k12.pa.us ESMTP Postfix In: EHLO svma15-2.kanden.ne.

Re: user getting spoofed

2009-02-20 Thread jeff donovan
On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: You should see the REJECT please... from Noel's example in the logs. J.P. got it working. Feb 20 11:07:51 mail2 postfix/smtpd[28710]: NOQUEUE: reject: RCPT from mailrelay1.msp.eschelon.com[209.150.200.11]: 557 <>: Sender address reje

Re: user getting spoofed :; update ::

2009-02-20 Thread jeff donovan
On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: jeff donovan wrote: # reject_ndn <> REJECT please don't send notices to forged sender -- Noel Jones Greetings, I have added the data restrictions, the restrictions class, and the sender restrictions. is there an error number or

Re: user getting spoofed

2009-02-20 Thread jeff donovan
On Feb 20, 2009, at 9:56 AM, J.P. Trosclair wrote: jeff donovan wrote: # reject_ndn <> REJECT please don't send notices to forged sender -- Noel Jones Greetings, I have added the data restrictions, the restrictions class, and the sender restrictions. is there an error number or somethi

Re: user getting spoofed

2009-02-20 Thread J.P. Trosclair
jeff donovan wrote: # reject_ndn <> REJECT please don't send notices to forged sender -- Noel Jones Greetings, I have added the data restrictions, the restrictions class, and the sender restrictions. is there an error number or something I can grep in my logs to check how these new res

Re: user getting spoofed

2009-02-20 Thread jeff donovan
On Feb 19, 2009, at 10:39 AM, Noel Jones wrote: jeff donovan wrote: Greetings I have a user whos name is being spoofed by the spammers of the world. and her mailbox is getting flooded by legitimate Mailer Delivery notices. Is there anything i can do for her besides change her account nam

Re: user getting spoofed

2009-02-20 Thread jeff donovan
On Feb 19, 2009, at 10:39 AM, Noel Jones wrote: jeff donovan wrote: Greetings I have a user whos name is being spoofed by the spammers of the world. and her mailbox is getting flooded by legitimate Mailer Delivery notices. Is there anything i can do for her besides change her account nam

Re: user getting spoofed

2009-02-19 Thread Noel Jones
Geert Hendrickx wrote: On Thu, Feb 19, 2009 at 09:39:42AM -0600, Noel Jones wrote: You can use the ips.backscatterer.org to reject bounces (*NOT* all mail) from known backscatter sources. Do this in smtpd_data_restrictions for compatibility with sender address verification. # main.cf smtpd_data

Re: user getting spoofed

2009-02-19 Thread Geert Hendrickx
On Thu, Feb 19, 2009 at 09:39:42AM -0600, Noel Jones wrote: > You can use the ips.backscatterer.org to reject bounces (*NOT* all mail) > from known backscatter sources. Do this in smtpd_data_restrictions for > compatibility with sender address verification. > # main.cf > smtpd_data_restrictions =

Re: user getting spoofed

2009-02-19 Thread Paweł Leśniak
Noel Jones pisze: jeff donovan wrote: Greetings I have a user whos name is being spoofed by the spammers of the world. and her mailbox is getting flooded by legitimate Mailer Delivery notices. Is there anything i can do for her besides change her account name ? I was thinking about a tempora

Re: user getting spoofed

2009-02-19 Thread Noel Jones
jeff donovan wrote: Greetings I have a user whos name is being spoofed by the spammers of the world. and her mailbox is getting flooded by legitimate Mailer Delivery notices. Is there anything i can do for her besides change her account name ? I was thinking about a temporary regex to discard