--- Bill Landry <[EMAIL PROTECTED]> wrote: > J. wrote the following on 4/8/2007 11:14 AM -0800: > > Not sure if this is connected to my agressive smtp connection > rejection > > campaign over the past week, but we've been hit for the first time > in > > many months with a backscatter spam attack. Spammer(s) use random > > addresses with our domain for their spamming so we get the flood > > (13000+ since midnight) of bounces. > > > > Is there a good way to deal with this? 70-80% are getting caught by > > spamassassin, but there are still thousands that get through and I > have > > to filter manually (maildrop). Also, I hate the servers that just > keep > > the subject line intact when they bounce a message because I can't > > figure out how to filter those. As it is I'm already filtering over > 30 > > different subject line types to catch different types of bounces. > And > > how to I find the legitimate bounces in that haystack? It's a lot > of > > fun! > > > > Thanks > What MTA are you using? If Postfix, take a look at: > http://www.postfix.org/BACKSCATTER_README.html > > Also, have you taken a look at the SA "vbounce" ruleset? See: > > http://wiki.apache.org/spamassassin/VBounceRuleset
Thanks. That's great that there's a rule and plugin. I'm using qmail. ____________________________________________________________________________________ Sucker-punch spam with award-winning protection. Try the free Yahoo! Mail Beta. http://advision.webevents.yahoo.com/mailbeta/features_spam.html
