Scott Haneda a écrit :
> On May 13, 2009, at 1:08 PM, Randy wrote:
> 
>> You can still do an auto-reply using scripts. Hand off the user's
>> message, then send it to the new location.
>> I used smtpd_recipient_restrictions and created a list. I then passed
>> this on to the autoresponder once a user/input validation script made
>> did a few checks. After this, the script sends it on its merry way.
> 
> 
> While we are on the subject of autoreplies, there is a not a lot of data
> here:
>     http://www.postfix.org/VIRTUAL_README.html#autoreplies
> 
> I did some brief searching, perhaps I am not using the correct
> terminology...
> 
> With auto-reply, what is the preferred method most are using for
> allowing end user configuration of the enabling, disabling, and
> message.  Are there any solutions that give end user control over the
> time window in which is is active?
> 
> What are my options in regards to not replying to the same address more
> than once during the time window in which the auto reply message has
> been set?
> 
> Thank for any info or links to other docs I am missing.

There are problems with auto-responders:
- first, there is the backscatter problem (sending the reply to a forged
address...).
- second, most auto-responders are broken, in so many ways.

so at this time, the "answer" is: don't use a responder unless you are
willing to invest in setting up a good one.

some basic rules:
- filter spam and only respond if "spamicity" is reasonably low (for
example, with a "correctly configured" spamassassin setup, don't respond
if spam level is >= 3 [this is an example: 3 is arbitrary here]). the
idea is to detect as much spam as you can, so that responses to spam are
rare.
- never respond to addresses found in headers. if a response is to be
sent, send it to the original envelope sender. This is unfortunately
often missed.
- do not respond to automatically submitted or resent mail. This
includes mail from mailing-lists.
- the auto-response should contain enough infos (reason for the
auto-response, original headers). it is a good idea to include a short
English text if you use another language.
- unless you know why, the auto-response shouldn't contain the original
body. the rationale is to avoid resending spam. I often see auto-replies
containing viruses. This is irresponsible.

See RFC 3834 for more infos.


        

Reply via email to