[nflug] Forged mail header bounces up exponentially

[Christopher Hawkins]

Me three. I use sendmail, though. I wonder if there isn't a way to use a
procmail recipe to call a script that greps the maillog for a matching
outbound email at some earlier point? And if it doesn't find a match, it
knows it can throw away the bogus undeliverable receipt? I'm not a procmail
ninja but if anyone else is, does this sound plausible? If no ninjas are
among us I will take a peek and see if something could be cobbled together. 

Chris

> -----Original Message-----
> From: nflug-bounces at nflug.org 
> [mailto:nflug-bounces at nflug.org] On Behalf Of Richard Hubbard
> Sent: Monday, April 28, 2008 6:32 PM
> To: nflug at nflug.org
> Subject: Re: [nflug] Forged mail header bounces up exponentially
> 
> I'll throw in a "me too" to this.  It's been rotating through 
> the users in my network. We're using Lotus Domino with 
> Symantec (yes, I know) Anti-Spam.  It seems that symantec 
> hasn't figured out how to scan these things yet.
> 
> Anyone know if spamasassin can stop these things?
> 
> Cyber Source wrote:
> > Hey Erek,
> >  Glad to hear I'm not the only one seeing this. Started 
> seeing in like
> > 2 weeks ago. I had one client get like 1000 emails in one day, all 
> > bounces from email servers and the like. This is a very good reason 
> > why email admins should NOT allow this behavior, as it's now being 
> > used as a round about way to send spam. Fortunately this 
> stopped for 
> > that client and I've seen it for some others, including my own.
> > If anyone has a remedy, I'd love to hear it. Thanks, Peter