I turned on a catch-all recently, and measured about 1gig of
backscatter junk (bounces coming in to me from emails (spam) that I
did not send) arriving per day.
Would it be out-of-order to script a robot to parse all this, then
automatically send daily digest complaints to the networks involved,
telling them to (A) switch SPF on so they don't accept forged mail in
the first place, and (B) asking them not to accept mail to invalid
recipients, so they don't then have to originate bounces anyhow?
Has anyone got any info about what this backscatter is about, or why
spammers have selected just certain specific domains to fake spams
from? I've got hundreds of domains, but they only ever pick two of
mine - their script seems to pick a sender like
$localpart=&RandomDictionaryWord(); $domain=$domainlist[rand()];
$sender="$localpart(_at_)$domain"; - which is fair enough, but more often
than not - examining the bounces - it's picked a recipient the same
way: besides DoS, which I doubt (this has been going on for
1.5years+), originating emails from and to unlikely recipients seems
utterly pointless. Interestingly - they manage to pick an almost
completely unique list of originating IP addresses every day
(thousands of them). Real smart spamming *software*, real dumb
spammers: something doesn't add up.
Regards,
Chris
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com