<br><br>
<div><span class="gmail_quote">On 28/03/2008, <b class="gmail_sendername">Paul Houselander (SME)</b> <<a href="mailto:housey@sme-ecom.co.uk">housey@sme-ecom.co.uk</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">>Hi all, anyone help with some good rules to combat backscatter email?<br>i seem to have a real problem with this at the moment, mostly bouncing<br>
back from .ru domains to my customers. i'm sure a ruleset will help but<br>i'm not certain what would >be best, header checks or something in the<br>spam rules?<br>><br>>thanks<br>><br>>SMJ<br><br>
>>The solutions depends on your MTA, if you are using sendmail check this:<br>>><br>>><a href="http://elqui.dcsc.utfsm.cl/util/email/backscatter.html">http://elqui.dcsc.utfsm.cl/util/email/backscatter.html</a><br>
>><br>>>And this:<br>>><br>>><a href="http://www.spamcop.net/fom-serve/cache/329.html">http://www.spamcop.net/fom-serve/cache/329.html</a><br>>><br>>>If you are using postfix check this:<br>
>><br>>><a href="http://www.postfix.org/BACKSCATTER_README.html">http://www.postfix.org/BACKSCATTER_README.html</a><br>>><br>>>If you have another MTA just google "mta+backscatter" and you'll find<br>
>>tons of information.<br><br>I think most of the suggestions are to use something like milter-ahead to<br>reject invalid users, however since the beginning of the week ive been<br>seeing more and more backscatter targeted at valid aliases in which case<br>
recipient verification will not make any difference.<br><br>I spent a while yesterday looking at the watermark feature of mailscanner,<br>if your customers send their outbound e-mail via a server you control it<br>works a treat.<br>
<br>Only problem I can see is it seems to incorrectly flag, read receipts and<br>some out of office replies (which I think has been discussed quite a bit on<br>this list) but I personally think it's a small price to pay for a clean<br>
inbox!<br><br>An alternative that I was using was I use mimedefang as while as<br>mailscanner, I wrote a mimedefang filter to reject all bounces for certain<br>domains that were being targeted, not really a great ideal as I understand<br>
it breaks certain RFC's but was the only way I could control mail flow on my<br>servers.<br><br>Good Luck<br><br>Paul<br><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>
<br>Support MailScanner development - buy the book off the website!<br></blockquote></div>
<div><br>Thanks Paul,</div>
<div> </div>
<div>mmm, that's the problem isn't it - valid addresses! I've seen this increase a LOT this week it's nice to know i've not been the only one.</div>
<div> </div>
<div>I think milter-ahead is a sendmail app isn't it? I used to use that a few years ago before switching to postfix (it's easier to administer!) I played around with some of snertsoft's filters back then and they seemed to work really well.</div>
<div> </div>
<div>I'm sure I can crack this with some sort of rule set, anyways I'll keep plugging away but any comments are really appreciated.</div>