jethrot Posted December 5, 2003 Share Posted December 5, 2003 Hey folks, I have a question/problem. First a little background: I have a couple of email addresses the spammers have gotten hold of big time. I've been reading and searching the forums, and I know that I can create that email box and a forwarder to point to :fail: so the email bounces (I don't necessarily want it to go to :blackhole:). I also run SpamAssassin, but, I'm having a confusing issue. It appears that SpamAssasin is run on the emails coming in BEFORE they're routed to the correct email box (in this case, to be bounced). The result is that my default email box keeps getting copies of the emails that are bounced, and I really can't tell if the spammer (assuming a legit address) is getting a bounced message or not. example headers: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: lotto@xxxxx.xxx ------ This is a copy of the message, including all the headers. ------ Return-path: <my_default_mailbox_here@server44.totalchoicehosting.com> Received: from my_default_mailbox_here by server44.totalchoicehosting.com with local-bsmtp (Exim 4.24) id 1ASINp-0003iF-Hx for lotto@xxxx.xxx; Fri, 05 Dec 2003 09:00:46 -0700 Received: from localhost [127.0.0.1]by server44.totalchoicehosting.com with SpamAssassin (2.60 1.212-2003-09-23-exp); Fri, 05 Dec 2003 09:00:46 -0700 From: Mail Aisle <kjljvrkvrsoxmivl@mailaisle.com> To: xxxx <lotto@xxxx.xxx> Subject: *****SPAMASSASSIN***** Add Sound to Your Digital Pictures - Holiday Price $19.99 Date: Thu, 4 Dec 2003 15:51:47 -0600 (CST) Message-Id: <16975212.1070574707299.JavaMail.root@mailaisle.com> X-Spam-Flag: YES X-Spam-Level: ********** X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on server44.totalchoicehosting.com X-Spam-Status: Yes, hits=10.4 required=5.0 tests=DATE_IN_PAST_12_24, HTML_70_80,HTML_COMMENT_SAVED_URL,HTML_FONTCOLOR_UNKNOWN, HTML_IMAGE_ONLY_06,HTML_MESSAGE,HTML_WEB_BUGS,MARKETING_PARTNERS, MIME_BOUND_DASH_DIGIT,OFFERS_ETC,RATWARE_STORM_URI,RCVD_IN_SBL autolearn=no version=2.60 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_3FD0ABAE.DAEC9FD4" This is a multi-part message in MIME format. ------------=_3FD0ABAE.DAEC9FD4 Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: 8bit Spam detection software, running on the system "server44.totalchoicehosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. etc..... Anybody have any ideas how to :fail: delivery for a mailbox while using SpamAssassin, but not have copies of the bounced message show up in my default mailbox? Thanks! Quote Link to comment Share on other sites More sharing options...
TCH-Rick Posted December 5, 2003 Share Posted December 5, 2003 I'm not sure why you want them to bounce rather than just set up the address to go to :blackhole:. The :fail: option does send a bounce and theoretically is designed so that the other server will then remove the address from their list. Spammers, however, often use fake address so the bounced message bounces back to you. Not only that, but the messages often get stuck in the mail queue first and are retried many times before it ultimately fails. This means more work on the mail server as it processes messages that will never get delivered. I recommend sending messages to :blackhole: so that the server only has to deal with the message once. It comes in, is discarded, and forgotten. Quote Link to comment Share on other sites More sharing options...
TCH-Don Posted December 6, 2003 Share Posted December 6, 2003 Also do not create an e-mail account for the name, just forward it to :balckhole: Quote Link to comment Share on other sites More sharing options...
jethrot Posted December 6, 2003 Author Share Posted December 6, 2003 gotcha...that's what I was doing wrong. Thanks for the quick responses folks! TCH ROCKS! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.