From owner-freebsd-questions@FreeBSD.ORG Thu Oct 16 16:56:43 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 06959106568C for ; Thu, 16 Oct 2008 16:56:43 +0000 (UTC) (envelope-from eculp@casasponti.net) Received: from ns2.bafirst.com (72-12-2-19.static.networktel.net [72.12.2.19]) by mx1.freebsd.org (Postfix) with ESMTP id AAFD28FC1B for ; Thu, 16 Oct 2008 16:56:42 +0000 (UTC) (envelope-from eculp@casasponti.net) Received: from casasponti.net ([201.155.7.3]) by ns2.bafirst.com with esmtp; Thu, 16 Oct 2008 11:56:40 -0500 id 000D52F1.48F77248.00001FB8 Received: from localhost (localhost [127.0.0.1]) (uid 80) by casasponti.net with local; Thu, 16 Oct 2008 11:56:08 -0500 id 00130D04.48F77228.0000D158 Received: from dsl-189-190-8-164.prod-infinitum.com.mx (dsl-189-190-8-164.prod-infinitum.com.mx [189.190.8.164]) by intranet.casasponti.net (Horde Framework) with HTTP; Thu, 16 Oct 2008 11:56:08 -0500 Message-ID: <20081016115608.17qwm4xcs6jkg84oc@intranet.casasponti.net> Date: Thu, 16 Oct 2008 11:56:08 -0500 From: eculp@casasponti.net To: Yury Michurin References: <20081016090102.17qwm4xcs6f4so8ok@intranet.casasponti.net> <692c9a9f0810160717m6e295a77qcf91f7b64a7b726c@mail.gmail.com> In-Reply-To: <692c9a9f0810160717m6e295a77qcf91f7b64a7b726c@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Internet Messaging Program (IMP) H3 (5.0-cvs) X-Remote-Browser: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.1.17) Gecko/20080925 Firefox/2.0.0.17 X-IMP-Server: 201.155.7.3 X-Originating-IP: 189.190.8.164 X-Originating-User: eculp@casasponti.net Cc: freebsd-questions@freebsd.org Subject: Re: I've just found a new and interesting spam source - legitimate bounce messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Oct 2008 16:56:43 -0000 Yury Michurin escribi=C3=B3: > Hello, > start with putting spf record on the domain, > http://www.netdummy.net/stop-bounce-mail.html > and finish with filtering bogus message-id wich was not orignated on your > server with whatever software you using. I've had the spf record for a couple of years and I've started =20 filtering. I guess I was just looking for something different. Thanks for helping me adapt to the real world. ed > > Regards, > Yury > > On Thu, Oct 16, 2008 at 4:01 PM, wrote: > >> In the last hour, I've received over 200 legitimate bounce messages from >> email services as a result of someone having used or worse is using my em= ail >> address in spam from multiple windows machines and ip addresses. The end >> result is that I am getting the bounce messages. I'm sure that others on >> this list have experienced the problem and maybe have a solution that I >> don't have. >> >> The messages are allowed through my obspamd/pf and pf smtp bruteforce >> blocking rules because they are completely legit. >> >> I guess the work around is to filter them on incoming together with our >> local bounce messaages util the spammers get tired of my address. >> >> Thanks for any suggestions, >> >> ed >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to " >> freebsd-questions-unsubscribe@freebsd.org" >> >