Temp RBL

[Rick Macdougall <ri...@nougen.com>]

Hi,

I just set up a temporary RBL of mail servers that accept then bounce 
later. My personal mail server has been getting nailed for the last 26 
hours with millions of bounces to non existent users from servers all 
over the world.  Obviously it is due to a spam run using my personal 
domain name but I'm sick and tired of servers that accept an email then 
bounce it later.

Anyone in the same predicament ?

Regards,

Rick

ps: it is accept-bounce.nougen.com if anyone wants to take a look at 
their servers.

RE: outscatters list [Was: Temp RBL]

[Herb Martin <He...@learnquick.com>]

> Rick Macdougall a écrit :
> 
> > Hi,
> >
> > I just set up a temporary RBL of mail servers that accept 
> then bounce 
> > later. My personal mail server has been getting nailed for 
> the last 26 
> > hours with millions of bounces to non existent users from 
> servers all 
> > over the world.  Obviously it is due to a spam run using my 
> personal 
> > domain name but I'm sick and tired of servers that accept an email 
> > then bounce it later.
> >
> > Anyone in the same predicament ?
> 
> seen that some time ago. but some of the guilty outscatters 
> were large 
> ISPs that I can't just block.

We do blocking ONLY on multiple criteria so perhaps using
a positive here along WITH a subject (or other) filter
on various return mail keywords would work.

I believe this would work well for us.


--
Herb Martin\

> -----Original Message-----
> From: mouss [mailto:usebsd@free.fr] 
> Sent: Saturday, November 12, 2005 5:46 PM
> To: Rick Macdougall
> Cc: SpamAssassin Users
> Subject: outscatters list [Was: Temp RBL]
> 
> 
> 

outscatters list [Was: Temp RBL]

[mouss <us...@free.fr>]

Rick Macdougall a écrit :

> Hi,
>
> I just set up a temporary RBL of mail servers that accept then bounce 
> later. My personal mail server has been getting nailed for the last 26 
> hours with millions of bounces to non existent users from servers all 
> over the world.  Obviously it is due to a spam run using my personal 
> domain name but I'm sick and tired of servers that accept an email 
> then bounce it later.
>
> Anyone in the same predicament ?

seen that some time ago. but some of the guilty outscatters were large 
ISPs that I can't just block.

ISPs need to queue mail for their users (in case of temp dns failures, 
...), and it would be hard for them to move to immediate delivery if 
they don't already have that. they can however do some throttling to 
cope with such attacks.

> ps: it is accept-bounce.nougen.com if anyone wants to take a look at 
> their servers.

Re: Temp RBL /invalid recipient

[mouss <us...@free.fr>]

Greg Allen a écrit :

>Your subject should not be temp RBL, you started talking about temp RBL then
>changed subjects to your real subject.
>
>Regardless.
>
>You need to configure an invalid recipient filter.
>
>Different email servers have different ways of doing this.
>
>Postfix has a rule too for invalid recipients.
>
>Here is a write-up about exchange for instance.
>
>http://support.microsoft.com/?kbid=886208
>
>Invalid recipient rejecting is becoming a standard on the Internet for just
>the reasons you mentioned.
>
>  
>
the OP meant he got backscatter and composed a list of "outscatters". 
not that he does backscatter.

RE: Temp RBL /invalid recipient

[Greg Allen <sa...@floridacpu.com>]

Your subject should not be temp RBL, you started talking about temp RBL then
changed subjects to your real subject.

Regardless.

You need to configure an invalid recipient filter.

Different email servers have different ways of doing this.

Postfix has a rule too for invalid recipients.

Here is a write-up about exchange for instance.

http://support.microsoft.com/?kbid=886208

Invalid recipient rejecting is becoming a standard on the Internet for just
the reasons you mentioned.





> -----Original Message-----
> From: Rick Macdougall [mailto:rickm@nougen.com]
> Sent: Thursday, November 10, 2005 7:24 PM
> To: SpamAssassin Users
> Subject: Temp RBL
>
>
> Hi,
>
> I just set up a temporary RBL of mail servers that accept then bounce
> later. My personal mail server has been getting nailed for the last 26
> hours with millions of bounces to non existent users from servers all
> over the world.  Obviously it is due to a spam run using my personal
> domain name but I'm sick and tired of servers that accept an email then
> bounce it later.
>
> Anyone in the same predicament ?
>
> Regards,
>
> Rick
>
> ps: it is accept-bounce.nougen.com if anyone wants to take a look at
> their servers.
>
>
>