[nflug] Forged mail header bounces up exponentially

[Cyber Source]

Aside from setting up filters, it's going to be hard because they are in 
a sense legitimate emails.

Richard Hubbard wrote:
> I'll throw in a "me too" to this. It's been rotating through the users 
> in my network. We're using Lotus Domino with Symantec (yes, I know) 
> Anti-Spam. It seems that symantec hasn't figured out how to scan these 
> things yet.
>
> Anyone know if spamasassin can stop these things?
>
> Cyber Source wrote:
>> Hey Erek,
>> Glad to hear I'm not the only one seeing this. Started seeing in like 
>> 2 weeks ago. I had one client get like 1000 emails in one day, all 
>> bounces from email servers and the like. This is a very good reason 
>> why email admins should NOT allow this behavior, as it's now being 
>> used as a round about way to send spam. Fortunately this stopped for 
>> that client and I've seen it for some others, including my own.
>> If anyone has a remedy, I'd love to hear it. Thanks, Peter
>>
>> Erek Dyskant wrote:
>>> Howdy All,
>>> A whole lot of our customers are having their email addresses forged to
>>> be used as from addresses in spam attacks. As a result, we're getting
>>> hammered with a truly amazing number of bounce messages.
>>>  I've always seen this happen once a month or every other month, but
>>> now I'm seeing it maybe once a day for a different customer.
>>> Are any of the mail admins here on the list experiencing similar
>>> problems over the last few weeks, and if so, how are you addressing
>>> them?
>>>
>>>
>>> Cheers,
>>> Erek
>>>
>>> _______________________________________________
>>> nflug mailing list
>>> nflug at nflug.org
>>> http://www.nflug.org/mailman/listinfo/nflug
>> _______________________________________________
>> nflug mailing list
>> nflug at nflug.org
>> http://www.nflug.org/mailman/listinfo/nflug
>>
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>