From owner-freebsd-questions@FreeBSD.ORG Thu Oct 16 16:10:01 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AAB731065686 for ; Thu, 16 Oct 2008 16:10:01 +0000 (UTC) (envelope-from LukeD@pobox.com) Received: from sasl.smtp.pobox.com (a-sasl-fastnet.sasl.smtp.pobox.com [207.106.133.19]) by mx1.freebsd.org (Postfix) with ESMTP id 7A63E8FC27 for ; Thu, 16 Oct 2008 16:10:01 +0000 (UTC) (envelope-from LukeD@pobox.com) Received: from localhost.localdomain (localhost [127.0.0.1]) by a-sasl-fastnet.sasl.smtp.pobox.com (Postfix) with ESMTP id 0B7CF6F24E; Thu, 16 Oct 2008 11:55:04 -0400 (EDT) Received: from lukas.is-a-geek.org (pool-71-113-98-220.sttlwa.dsl-w.verizon.net [71.113.98.220]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by a-sasl-fastnet.sasl.smtp.pobox.com (Postfix) with ESMTPSA id A868F6F24A; Thu, 16 Oct 2008 11:55:01 -0400 (EDT) Date: Thu, 16 Oct 2008 08:54:55 -0700 (PDT) From: Luke Dean X-X-Sender: lukas@border.lukas.is-a-geek.org To: Matthew Seaman In-Reply-To: <48F75A88.1000507@infracaninophile.co.uk> Message-ID: References: <20081016090102.17qwm4xcs6f4so8ok@intranet.casasponti.net> <20081016145255.GA12638@icarus.home.lan> <48F75A88.1000507@infracaninophile.co.uk> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Pobox-Relay-ID: CBF8814A-9B9A-11DD-A9EC-1E1F86D30F62-96347044!a-sasl-fastnet.pobox.com Cc: freebsd-questions@freebsd.org Subject: Re: I've just found a new and interesting spam source - legitimate bounce messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Luke Dean List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Oct 2008 16:10:01 -0000 On Thu, 16 Oct 2008, Matthew Seaman wrote: > Until the wonderful day that the entire internet abides by these rules[*], > use > of technologies like SPF and DKIM can discourage but not entirely prevent the > spammers from joe-jobbing you. I just started getting these bouncebacks en masse this week. My mail provider publishes SPF records. If the names and numbers in the bouceback messages are to be believed, however, the spammers have defeated SPF by hijacking DNS. The poor recipients never see my SPF records because they're looking at the wrong IP address.