mass bounced emails

[Obantec Support <su...@obantec.net>]

Hi

Running SA3.2.3 but seeing a lot of bounced emails being sent to my 
customers. (not emails they are sending out but faked returns)

various subjects

From: MAILER-DAEMON@jrnet.ne.jp (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender

From: postmaster@lapit19.lapitoy.fi
Subject: Delivery Status Notification (Failure)

but always to a valid users mbox

should loadplugin Mail::SpamAssassin::Plugin::VBounce in v320.pre not catch 
these?

Mark 

Re: mass bounced emails

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

On 23.04.08 08:42, Obantec Support wrote:
> Running SA3.2.3 but seeing a lot of bounced emails being sent to my 
> customers. (not emails they are sending out but faked returns)
> 
> various subjects
> 
> From: MAILER-DAEMON@jrnet.ne.jp (Mail Delivery System)
> Subject: Undelivered Mail Returned to Sender
> 
> From: postmaster@lapit19.lapitoy.fi
> Subject: Delivery Status Notification (Failure)
> 
> but always to a valid users mbox
> 
> should loadplugin Mail::SpamAssassin::Plugin::VBounce in v320.pre not catch 
> these?

it should catch those, but only if you set something in
whitelist_bounce_relays.

It also probably won't tag them as spam, unless you enlarge scores for
*BOUNCE_MESSAGE (they are all now just 0.1)

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.