Hello Predrag, Saturday, September 11, 2004, 9:47:42 AM, you wrote:
PL> Spammer apparently is using [EMAIL PROTECTED] in the FROm PL> field of the emails he is sending out. Domain is one of my customers PL> virtual domain, spammer made up the username in the email address. PL> Now I am getting burried by mail notifications returning to PL> sender...obviously wrong person. Understood. I'm not being flooded, but have a steady stream of similar spam. Same thing happens with virus warnings/bounces. PL> How do you people deal with this? Is there anything I can do? Email PL> addresses in FROM field as we all know are fake when spammers use them. PL> But if you don't do it if someone misspelled an email address that is PL> legitimate and sent it to user they won't know it didn't make it. Grab http://www.timj.co.uk/linux/bogus-virus-warnings.cf -- does a good job of catching virus warnings/bounces. I've had a couple of FPs on it, but not bad. SARE has a set of rules we're reviewing that enhance/extend Tim's file above, covering a lot of spam bounce and spam reject notices. Haven't yet decided how to publish them, but they should be out by end of month. (Tim -- if you're reading this, please contact me -- my first attempts to email you have bounced.) Bob Menschel