From owner-freebsd-questions@FreeBSD.ORG Thu Oct 16 16:26:42 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 79EA21065695 for ; Thu, 16 Oct 2008 16:26:42 +0000 (UTC) (envelope-from bill@ayn.mi.celestial.com) Received: from ayn.mi.celestial.com (hayek.celestial.com [192.136.111.12]) by mx1.freebsd.org (Postfix) with ESMTP id 56E1B8FC1F for ; Thu, 16 Oct 2008 16:26:41 +0000 (UTC) (envelope-from bill@ayn.mi.celestial.com) Received: from localhost (localhost [127.0.0.1]) by ayn.mi.celestial.com (Postfix) with ESMTP id 952D2686147E1; Thu, 16 Oct 2008 09:26:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at mi.celestial.com Received: from ayn.mi.celestial.com ([127.0.0.1]) by localhost (ayn.mi.celestial.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id VGk143YdeCb3; Thu, 16 Oct 2008 09:26:41 -0700 (PDT) Received: by ayn.mi.celestial.com (Postfix, from userid 203) id 7662E686147C3; Thu, 16 Oct 2008 09:26:41 -0700 (PDT) Date: Thu, 16 Oct 2008 09:26:41 -0700 From: Bill Campbell To: freebsd-questions@freebsd.org Message-ID: <20081016162641.GA16819@ayn.mi.celestial.com> Mail-Followup-To: freebsd-questions@freebsd.org References: <20081016090102.17qwm4xcs6f4so8ok@intranet.casasponti.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20081016090102.17qwm4xcs6f4so8ok@intranet.casasponti.net> User-Agent: Mutt/1.5.18 OpenPKG/% (2008-05-17) Subject: Re: I've just found a new and interesting spam source - legitimate bounce messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd@celestial.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Oct 2008 16:26:42 -0000 On Thu, Oct 16, 2008, eculp@casasponti.net wrote: > In the last hour, I've received over 200 legitimate bounce messages from > email services as a result of someone having used or worse is using my > email address in spam from multiple windows machines and ip addresses. > The end result is that I am getting the bounce messages. I'm sure that > others on this list have experienced the problem and maybe have a > solution that I don't have. Did these come from Barracuda boxes? Blowback like this is hardly new or legitimate as the From and Sender header addresses are often (usually) forged in spam, and it does not do anything useful to reply to them. The forged addresses may just be something scraped from the address book of a machine running the Microsoft virus, Windows, or a deliberate ``Joe Job'' where a spammer is targeting somebody who may have caused them problems. Bill -- INTERNET: bill@celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 Common sense is genius dressed in its working clothes. -- Ralph Waldo Emerson