Jump to content

Spamassassin And Forwarding To :fail:


jethrot

Recommended Posts

Hey folks, I have a question/problem. First a little background:

 

I have a couple of email addresses the spammers have gotten hold of big time. I've been reading and searching the forums, and I know that I can create that email box and a forwarder to point to :fail: so the email bounces (I don't necessarily want it to go to :blackhole:).

 

I also run SpamAssassin, but, I'm having a confusing issue. It appears that SpamAssasin is run on the emails coming in BEFORE they're routed to the correct email box (in this case, to be bounced).

 

The result is that my default email box keeps getting copies of the emails that are bounced, and I really can't tell if the spammer (assuming a legit address) is getting a bounced message or not.

 

example headers:

 

This message was created automatically by mail delivery software.

 

A message that you sent could not be delivered to one or more of its

recipients. This is a permanent error. The following address(es) failed:

 

  lotto@xxxxx.xxx

   

 

------ This is a copy of the message, including all the headers. ------

 

Return-path: <my_default_mailbox_here@server44.totalchoicehosting.com>

Received: from my_default_mailbox_here by server44.totalchoicehosting.com with local-bsmtp (Exim 4.24)

id 1ASINp-0003iF-Hx

for lotto@xxxx.xxx; Fri, 05 Dec 2003 09:00:46 -0700

Received: from localhost [127.0.0.1]by server44.totalchoicehosting.com

with SpamAssassin (2.60 1.212-2003-09-23-exp);

Fri, 05 Dec 2003 09:00:46 -0700

From: Mail Aisle <kjljvrkvrsoxmivl@mailaisle.com>

To: xxxx <lotto@xxxx.xxx>

Subject: *****SPAMASSASSIN***** Add Sound to Your Digital Pictures - Holiday Price $19.99

Date: Thu, 4 Dec 2003 15:51:47 -0600 (CST)

Message-Id: <16975212.1070574707299.JavaMail.root@mailaisle.com>

X-Spam-Flag: YES

X-Spam-Level: **********

X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on

server44.totalchoicehosting.com

X-Spam-Status: Yes, hits=10.4 required=5.0 tests=DATE_IN_PAST_12_24,

HTML_70_80,HTML_COMMENT_SAVED_URL,HTML_FONTCOLOR_UNKNOWN,

HTML_IMAGE_ONLY_06,HTML_MESSAGE,HTML_WEB_BUGS,MARKETING_PARTNERS,

MIME_BOUND_DASH_DIGIT,OFFERS_ETC,RATWARE_STORM_URI,RCVD_IN_SBL

autolearn=no version=2.60

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_3FD0ABAE.DAEC9FD4"

 

This is a multi-part message in MIME format.

 

------------=_3FD0ABAE.DAEC9FD4

Content-Type: text/plain

Content-Disposition: inline

Content-Transfer-Encoding: 8bit

 

Spam detection software, running on the system "server44.totalchoicehosting.com", has

identified this incoming email as possible spam.  The original message

has been attached to this so you can view it (if it isn't spam) or block

similar future email.  If you have any questions, see

the administrator of that system for details.

 

etc.....

 

 

 

Anybody have any ideas how to :fail: delivery for a mailbox while using SpamAssassin, but not have copies of the bounced message show up in my default mailbox?

 

Thanks!

Link to comment
Share on other sites

I'm not sure why you want them to bounce rather than just set up the address to go to :blackhole:. The :fail: option does send a bounce and theoretically is designed so that the other server will then remove the address from their list. Spammers, however, often use fake address so the bounced message bounces back to you. Not only that, but the messages often get stuck in the mail queue first and are retried many times before it ultimately fails. This means more work on the mail server as it processes messages that will never get delivered.

 

I recommend sending messages to :blackhole: so that the server only has to deal with the message once. It comes in, is discarded, and forgotten.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...