Having set up check_sender_ns_access for our previously reported suspect and associates. And having made numerous additional configuration changes as suggested we are, for now, apparently successfully dealing with this source of spam. In fact, this morning we had exactly three reported spam messages arrive in people's INBOX overnight. And two of those were arguably spam-ish and not SPAM as in millions of bogus recipients.
However, in dealing with the irreducible amount left it occurs to me that our own internal anti-spam policies are not what they could be. We check outgoing mail for invalid from addresses and spamassassin gets a crack at their contents as well. So we are not excessively liberal in permitting outflow. However our abuse@ and postmaster@ addresses are manually handled and that is a problem even given our small size. Most, in fact virtually all, email to abuse@ and postmaster@ is spam itself and not reported spam. We would like to generate an automated confirmation request for each message that arrives to either address that, if responded to, we can use to route the abuse@ and postmaster@ messages to a human in a timely manner. I am not in a position to do much more than configure existing software in that regard. My question is then: Does anyone have any recommendations for an automated screening tool that works with Postfix, which generates confirmation requests for all messages sent to abuse@ and postmaster@, and then delivers any confirmed responses to some other address? Thanks, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:[email protected] Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
