procmail
[Top] [All Lists]

Re: Fake Bounces

2008-06-04 07:25:15
On Wed, 4 Jun 2008, Obantec Support wrote:
i have tried SA 3.2.4 to block messages that are Fake Bounces.
these are being delivered to valid email addresses on my server.

I've been grappling with this problem too. My long term solution 
is going to involve using mailavenger's "greylist" database mechanism
in a novel manner to start rejecting bounces when someone receives too
many of them within a short time period. But I need to code it....

My current work-around, avoiding false positives, is to get the user's
format for their outgoing "from" header, which includes their name,
and code a check for quoted 'from' headers in the body of the message
which include the user's address, but some *other* (fake) name....

MYOUTGOING="User Name"

Then what you look for (in SA or procmail recipe) is a line
in the body of the e-mail that consists of a quoted "From" line
with the user's address, but NOT their name:

Something similar to (check syntax!):
:0 B
* ^ *From.*<user(_at_)domain>
* !^ *From: +"User Name" +<user(_at_)domain>

- Charles

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>