procmail
[Top] [All Lists]

Re: Fake Bounces

2008-06-04 07:55:31
At 10:03 2008-06-04 +0100, Obantec Support wrote:
[snip]
these are being delivered to valid email addresses on my server.

anyone had these and written a regexp to grab them and send to a spam file? i know there will be some legit bounces but 1 customer had 500 in a day.

Examine the bogus bounces and compare them to legitimate ones. Note where the From: or Return-Path claim one address (say, AT YOUR DOMAIN), but the received headers don't jive (IF IT CLAIMS FROM YOUR MAILER DAEMON, THEN THE MESSAGES SHOULD HAVE BEEN GENERATED BY YOUR HOST - NOT SUBMITTED TO IT FROM ELSEWHERE).

Triggering on other characteristics which are wrong will be more reliabile than filtering based on subjects.

---
 Sean B. Straw / Professional Software Engineering

 Procmail disclaimer: <http://www.professional.org/procmail/disclaimer.html>
 Please DO NOT carbon me on list replies.  I'll get my copy from the list.

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>