Micheal Espinola Jr said: > I would like to know/see if it is possible to implement a > Message-ID tracking form of NDR authentication, to validate > if an incoming NDR is really in response to a recently > outbound message. I think this could go a long way to help > deter backscatter. > > Any thoughts on this? If not Message-ID based, is there > something else that would be appropriate? I believe Ironport > is doing something similar with their hardware devices. > > TIA for comments...
That sounds like a good idea. As an email passes through ASSP on its way outbound, it adds a message-id line to the header. There could be a log file that keeps track of those outbound message-id's and is automatically purged say after X amount of hours using the same sort of date/time stamping that other components in ASSP use. And each time a NDR comes, ASSP could do a header scan and compare it to the log file and either reject it or allow it in. Brett ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
