-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dan Mahoney, System Admin wrote: > Hey all, > > The subject line says it all. I've got a lot of users complaining > about bounce spam, and while there's an 0.1 scoring "Vbounce" > ruleset, I notice that more often than not "postmaster" scores > sometimes a whopping .5, and at other times -17. Is there any way > to simply say "dont do this for unqualified addresses?" (or > "postmaster addresses") > > -Dan I think your best bet is to not pipe bounce spam through SpamAssassin. It is pretty much useless and it is likely to screw things up, such as AWL or even Bayes. Plus, you be using a lot of resources to come to an obvious conclusion.
If the message is not to big, you can check bounces to see if any of your mail-relay(s) or otherwise authorized relays for an account/domain are somewhere in the body of the bounce (body of the bounce usually include headers of the original message). If you can't find any of your relays, it is almost certainly a false bounce. Using something like SPF for your domains might help too btw. And make sure to avoid catch-all addresses. Kind Regards, Sander Holthaus -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (MingW32) iD8DBQFFn7WKVf373DysOTURAvWwAJ9HGVqPIHy7aQ810ZOxfsoIvnxL8gCgzpkv 9z5VcitERtPMY9dCDX/Almk= =OwGa -----END PGP SIGNATURE-----
