Kurt Fitzner wrote:
Benny Pedersen wrote:
why do you care about it ?
after all its not your domain :-)
I care because:
A) All mail into my domain is filtered through SpamAssassin with a
milter - including mail that goes to postmaster and abuse. Not that my
little domain gets much on either address, but from what I've read on
rfc-ignorant.org, they take a dim view of filtering those addresses for
most any reason - and if someone like yahoo will get scored badly, I can
just see how much voice I would have if they decided to add me to their
list. I've had my share of run-ins with script kiddies and punks, and
if someone decided to it probably wouldn't be very hard to contrive of
an email that spamassassin would bounce and then forward that bounce to
rfc-ignorant.org. A form of DOS attack to which I am vulnerable to
because I filter spam from all my addresses.
So, why not use a milter that allows you to exempt abuse and postmaster
from bouncing?
For example, in Mimedefang, you could bounce if the score is >= 10 AND
if postmaster or abuse aren't in the recipient list. If the score is >=
10 and postmaster or abuse are on the recipient list, drop all other
recipients, mark it as spam, and deliver to a folder for human review.
