Re: Backscatter solutions

2008-05-09 Thread Andy Fiddaman
; Marc Grober wrote:
;  I am getting pounded by backscatter as a result of one of my addresses
;  being used by some major spammers. Are there any solutions available to
;  address all the Delivery failure and bounce notices.  I would at least
;  like to be able to sort between such responses from mail I am actually
;  sending and the backscatter. I have looked through headers and nothing
;  seems an obvious candidate.

Pretty much the only way to stop this is to use something like BATV to
tweak your envelope sender address outbound. That still doesn't stop
everything as out-of-office replies are usually sent from a real address.

http://tools.ietf.org/html/draft-levine-mass-batv-02
http://sourceforge.net/projects/batv-milter/

A.


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Ian Eiloart


--On 8 May 2008 17:38:18 -0700 Scott Likens [EMAIL PROTECTED] wrote:

 I wish that was really true,

 However having a spammer recently using my domain and email address to
 spam viagra.  SPF etc don't really work unless the receiver is using
 SPF checking.

If you aren't using SPF, then you can't really complain about backscatter. 
If you deploy SPF, then you can expect a bit less backscatter, and you can 
encourage others to check your SPF records.

-- 
Ian Eiloart
IT Services, University of Sussex
x3148

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Dennis Davis
On Fri, 9 May 2008, Andy Fiddaman wrote:

 From: Andy Fiddaman [EMAIL PROTECTED]
 Cc: info-cyrus@lists.andrew.cmu.edu
 Date: Fri, 9 May 2008 07:05:06 + (GMT)
 Subject: Re: Backscatter solutions

...

 Pretty much the only way to stop this is to use something like
 BATV to tweak your envelope sender address outbound. That still
 doesn't stop everything as out-of-office replies are usually sent
 from a real address.

 http://tools.ietf.org/html/draft-levine-mass-batv-02
 http://sourceforge.net/projects/batv-milter/

See:

http://www.exim.org/exim-html-current/doc/html/spec_html/ch40.html#SECTverifyPRVS

for details of how to implement BATV using exim.
-- 
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
[EMAIL PROTECTED]   Phone: +44 1225 386101

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Mike Cathey

On May 9, 2008, at 3:05 AM, Andy Fiddaman wrote:
 Pretty much the only way to stop this is to use something like BATV to
 tweak your envelope sender address outbound. That still doesn't stop
 everything as out-of-office replies are usually sent from a real  
 address.


BATV changes the from address of outbound messages.  How well do  
mailing lists deal with users that send messages from a different  
address each time?  Is there a nice workaround for this?

Cheers,

Mike


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Andy Fiddaman

On Fri, 9 May 2008, Mike Cathey wrote:
; On May 9, 2008, at 3:05 AM, Andy Fiddaman wrote:
;  Pretty much the only way to stop this is to use something like BATV to
;  tweak your envelope sender address outbound. That still doesn't stop
;  everything as out-of-office replies are usually sent from a real address.
;
; BATV changes the from address of outbound messages.  How well do mailing lists
; deal with users that send messages from a different address each time?  Is
; there a nice workaround for this?

It only changes the envelope address, leaving the From: message header
intact. In my experience mailing lists validate the From: header not the
return path so no problems.

I haven't found any problems in the past year I've been using it.

HTH.

A.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Joseph Brennan

Ian Eiloart [EMAIL PROTECTED] wrote:

 If you aren't using SPF, then you can't really complain about backscatter.


Forget SPF.  Why should any system accept mail for an unknown recipient
and then mail a bounce?  That's the primary cause of backscatter.  These
systems are just as likely to accept the message, then check SPF, and
mail a bounce :-)


This is getting off topic for the Cyrus list though.  The question
relevant to Cyrus, I thought, was whether a sieve filter can catch
backscatter.  With header-only tests, not so much.


Joseph Brennan
Lead Email Systems Engineer
Columbia University Information Technology


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Backscatter solutions

2008-05-09 Thread Karl Boyken

We're looking at this as a solution:

  http://www.snertsoft.com/sendmail/milter-null/

Karl

--
Karl Boyken, system administrator 
[EMAIL PROTECTED]
303A MLH, Dept. of Comp. Sci. 
http://www.cs.uiowa.edu/~boyken/
The U. of Iowa, Iowa City, IA  52242   319-335-2730 (voice) 
319-335-3668 (fax)


smime.p7s
Description: S/MIME Cryptographic Signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html