Will the filter keep spoofed email senders from getting into the queue
manager in IMail?  the format I am seeing is like
bipweks@<domain-name.com .  The biggest problem I see is the server keeps
re-trying to send the email, but bipweks account does not exist in our email
system, so I would like to keep them from getting into the queue manager.
  -----Original Message-----
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David
Barker
  Sent: Thursday, April 03, 2008 12:25 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Forged-Spam Backscatter


  We use 2 filters to address the issue which work well for us. I will make
them available on our website this week.

  David  B



  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim
Comerford
  Sent: Thursday, April 03, 2008 2:46 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Forged-Spam Backscatter



  Over the last several weeks we have seen a dramatic increase in spam
hitting our server.  From about 70,000 mails a day to around 110,000 /day.



  Most destined for our users is getting properly filtered by declude.



  What is getting thru is backscatter from spam that is forging addresses
from domains we host.  It seems just about any address that is posted on a
website seems to be being used to forge outgoing spam (not from our
server) -- and is generating all sorts of bounce messages.



  I suspect there is not much I can do to block this backscatter without
blocking legit bounce messages... but I thought I'd ask.



  Here is our config:

      Imail 8.22

      Declude 4.3.64

      invURIBL 3.1.1

      Sniffer


  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.JunkMail". The archives can be found
  at http://www.mail-archive.com.


  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.JunkMail". The archives can be found
  at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to