lst_ho...@kwsoft.de skrev 2010-11-24 10:22:
Zitat von Patric Falinder <patric.falin...@omg.nu>:
Hi,
A colleague of mine gets a lot of weird Delivery Status Notifications,
Failure Notice and Rejected messages. Yesterday she got 200 of them..
They all come from different servers and they are most from Russia and
Japan and they are countries that we have no connection to at all.
I've looked at the message headers and I can't figure out Why he
receives so many messages..
All the mail-servers that send them to us have PTR-records so they
look legit to me.
They all come from MAILER-DAEMON and the content is pretty much rubbish.
I attached a message with headers and everything, just changed the
address for my colleague.
Is there some way that I can block these kind of things?
Is someone sending out spam using her email-address and when the
receiving server can't deliver they send the notice to the real address?
It's called "backscatter". Have a look here
http://www.postfix.org/BACKSCATTER_README.html
Maybe consider using the DNSRBL from http://www.backscatterer.org/ for
the address affected, at least the server in your example is listed there.
Regards
Andreas
Thank you! I've never heard of backscatterer.org before so I will try
that and see if it helps :)
Thanks,
-Patric
