Hello Predrag,

Saturday, September 11, 2004, 9:47:42 AM, you wrote:

PL> Spammer apparently is using  [EMAIL PROTECTED] in the FROm
PL> field of the emails he is sending out. Domain is one of my customers
PL> virtual domain, spammer made up the username in the email address.
PL> Now I am getting burried by mail notifications returning to
PL> sender...obviously wrong person.

Understood.  I'm not being flooded, but have a steady stream of similar
spam. Same thing happens with virus warnings/bounces.

PL> How do you people deal with this? Is there anything I can do? Email 
PL> addresses in FROM field as we all know are fake when spammers use them.
PL> But if you don't do it if someone misspelled an email address that is
PL> legitimate and sent it to user they won't know it didn't make it.

Grab http://www.timj.co.uk/linux/bogus-virus-warnings.cf -- does a good
job of catching virus warnings/bounces. I've had a couple of FPs on it,
but not bad.

SARE has a set of rules we're reviewing that enhance/extend Tim's file
above, covering a lot of spam bounce and spam reject notices. Haven't yet
decided how to publish them, but they should be out by end of month.

(Tim -- if you're reading this, please contact me -- my first attempts to
email you have bounced.)

Bob Menschel



Reply via email to