Spam Actions

Julian Field mailscanner at ecs.soton.ac.uk
Wed Sep 11 14:26:07 IST 2002


At 14:20 11/09/2002, you wrote:
>Do many spammer really use their return address in the From or
>Reply-To?  A very large number that I see tend to have our own domain in
>the From.

I am not using any address from the headers, I only use the envelope.

>   Will this really do more that annoy the innocent, or fill up
>my postmaster account with more "User Unknown" bounces?

The "bounce" messages are sent in such a way that attempts to bounce the
"bounce" message will fail.

>The choice is good, I'm sure, but I don't see how I would ever want to
>use it.

Then don't :-)


>Please correct me if I'm missing something here.
>
>On Wed, 2002-09-11 at 05:02, Julian Field wrote:
> > At 08:45 11/09/2002, you wrote:
> > >On Tue, 10 Sep 2002 23:31:59 -0500, you wrote:
> > >
> > > >> It should still be possible to whitelist ones own IP's and the
> > > >> postmaster/abuse/admin accounts.
> > > >>
> > > >Agreed, but I think it best to be judicious in generating a bounce for a
> > > >black list hit. My preference is to only send the bounce back if it
> > > >looks like a legitimate email message that just happens to originate
> > > >from a black listed site. Spammers who take advantage of an open relay
> > > >or those that fall for the "make money with your computer at home" could
> > > >care less if the get a bounce (and most will never be delivered anyway).
> > > >It's the innocent user that just happens to be at a black listed site
> > > >that I'm concerned about.
> > >
> > >To make it even more difficult:
> > >
> > >Bounce the message referencing the blacklist if SA doesn't qualify it as
> > >spam. Don't bounce when SA says it's spam.
> >
> > I'm starting to regret this....
> > I need to keep it relatively simple or else no-one will ever work out how
> > to use it, which is worse than doing nothing. I've got a fairly clear idea
> > of what I want to do, which will hopefully keep most of you happy most of
> > the time. If it detected as spam, add "bounce" to the list of things you
> > can do, but allow you to put the contents of the X-MailScanner-SpamCheck
> > header in the message (excluding all the SA rule hits).
> >
> > I hope that's good enough for most of you :-)
> > --
> > Julian Field                Teaching Systems Manager
> > jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
> > Tel. 023 8059 2817          University of Southampton
> >                              Southampton SO17 1BJ
>--
>Tom DuVally
>Lead Sys. Programmer
>CIS, Brown University
>p 401-863-9466

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ



More information about the MailScanner mailing list