From: "Matthew Yette" <[EMAIL PROTECTED]>

The URL (or email address) that you input right when you start to install SA
(perl Makefile.PL):

What email address or URL should be used in the suspected-spam report
text for users who want more information on your filter installation?
(In particular, ISPs should change this to a local Postmaster contact)
default text: [the administrator of that system] <we put a link to our
website here explaining the rejection>

We've been using this under the assumption that it has been working as it
should...in the past (SA 2.64 and 3.0.4) we have gotten users following the link in the bounce email saying that it has been tagged as spam. However, I
just recently tested this to make sure it was working by sending a message
from an external account that would get rejected. The threshold is 5.0, and
the message scored 17.4 (I was monitoring qmail-queue.log as the message
came in). However, I never received a message stating that my message was
rejected.

Is this bounce message only sent if my message scores between the threshold
and the sa_delete variables? (In our case, 5 and 7)

Please do not do this Matthew. It is a sign of VERY poor network
management. It is also an excellent tool for spammers executing joe
jobs. When I find myself joe jobbed the ISP that is bouncing goes into
my procmailrc file with a redirect to /dev/null. I *NEVER* see anything
from them again. People running real sendmail servers tend to place
your address into their blacklists and drop all mails from your site.

This is a feature that should be taken right out of SpamAssassin
completely if it really bounces spam back to the "purported" (and
virtually always forged) sender or postmaster.

{O.O}   Joanne said that rather more politely than she is thinking
       about it in her head. I've been joe jobbed this way. It is
frustrating beyond belief.

Reply via email to