You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Larry Starr <la...@fullcompass.com> on 2005/02/23 00:11:00 UTC
Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address
I have been seeing hundreds of "Postmaster" messages a day, that are bounced
to bogus sender addresses, in my domain.
There have been a trickle of them coming in for a long time, but lately, the
volume has skyrocketed.
I am running Mimedefang 2.37 and Spamassassin 2.63 (ya I know I should upgrade
but have been buried in more pressing issues).
I'd like to develop a rule that would weed out these bounces (perhaps by
analyzing the "Received headers" to determine that the original message came
from elsewhere, and was wondering if anyone had already done such a thing.
The real problem is that I receive the "Postmaster" messages, and feel that
they should be reviewed, but with the volume so high they all tend to be
ignored/deleted.
Thank you,
--
Larry G. Starr -
Software Engineer: Full Compass Systems LTD.
Phone: 608-831-7330 x 1347 FAX: 608-831-6330
===================================================================
There are only three sports: bullfighting, mountaineering and motor
racing, all the rest are merely games! - Ernest Hemmingway
Re: Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address
Posted by Larry Starr <la...@fullcompass.com>.
On Wednesday 23 February 2005 00:57, Robert Menschel wrote:
> Hello Larry,
>
> Tuesday, February 22, 2005, 3:11:00 PM, you wrote:
>
> LS> I have been seeing hundreds of "Postmaster" messages a day, that
> LS> are bounced to bogus sender addresses, in my domain. ...
>
> LS> The real problem is that I receive the "Postmaster" messages, and
> LS> feel that they should be reviewed, but with the volume so high
> LS> they all tend to be ignored/deleted.
>
> Check out http://www.timj.co.uk/linux/bogus-virus-warnings.cf
>
> It will at least catch the virus-related bounces, and IMO with help
> from other rules should catch a fair number of spam bounces.
>
> Bob Menschel
Bob,
Thanks for the pointer. I'm already using that ruleset, but can see the
potential to add some local rules around it to catch, at least some, of the
spam bounces.
--
Larry G. Starr - larrys@fullcompass.com or starrl@globaldialog.com
Software Engineer: Full Compass Systems LTD.
Phone: 608-831-7330 x 1347 FAX: 608-831-6330
===================================================================
There are only three sports: bullfighting, mountaineering and motor
racing, all the rest are merely games! - Ernest Hemmingway
Re: Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address
Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Larry,
Tuesday, February 22, 2005, 3:11:00 PM, you wrote:
LS> I have been seeing hundreds of "Postmaster" messages a day, that
LS> are bounced to bogus sender addresses, in my domain. ...
LS> The real problem is that I receive the "Postmaster" messages, and
LS> feel that they should be reviewed, but with the volume so high
LS> they all tend to be ignored/deleted.
Check out http://www.timj.co.uk/linux/bogus-virus-warnings.cf
It will at least catch the virus-related bounces, and IMO with help
from other rules should catch a fair number of spam bounces.
Bob Menschel