On May 30, 2002 09:34 am, dman wrote:
> On Thu, May 30, 2002 at 03:32:55PM +0200, Tony L. Svanstrom wrote:
> |  I stopped /dev/null:ing e-mails a day or so ago, just to check if there
> | are any false hits there (partly due to spam passing SA and going to my
> | inbox).
> |
> |  Today when I sent a question regarding the number of hits a certain
> | e-mail got by the CVS-version things started going wrong... Someone had
> | an autoreply- system set up, and since this list wasn't whitelisted a
> | message was sent to my e-mailaddress, which of course meant that the
> | keywords in it triggered my auto- reply... and when I wrote a message to
> | their autowhitelist-system I didn't do anything about the keywords, so
> | then I got another autoreply which in turn triggered an autoreply from
> | me...
>
> The solution is to not use broken autoresponders.
>
> AUTO-RESPONDERS MUST NOT SEND MESSAGES TO ANY ADDRESS OTHER THAN THE
> ENVELOPE SENDER.  THEY ALSO MUST NOT REPLY TO "DSN" MESSAGES (sender
> is '<>').

It sounds like they were.  The envelope sender of the autoreply system will 
most likely still be the same as the user it's autoreplying for.

Also, auto-whitelisting like TMDA where you need to reply to a specific magic 
address to get your mail into the whitelist for a while don't send DSN 
messages, as far as I've seen, just a typical autogenerated message.

> If you pick addresses by any other means to autorespond to, then
> you're just asking for trouble.  In addition, you SHOULD add some
> X-Loop header to your automessage for detecting, and breaking, loops
> like that.

I wouldn't think X-Loop would catch it either.  We're not talking about the 
same message being ping-ponged back and forth, we're talking about an email 
that triggers a script that sends a -new- email back, which triggers another 
script, etc, etc.  New headers each time, so X-Loop would vanish at each end.

But yes, this isn't a SA thing, it's a detecting when automated scripts are 
nattering at each other.

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to