Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Martijn de Munnik
On Mon, 2009-07-27 at 19:56 +0200, Martijn de Munnik wrote: I guess I need prohibit the catch all account and offer the solution with the delimiter instead. That way all spam to bogus email addresses get rejected because the address does not exist. But still I wonder if there is a way

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Charles Marcus
On 7/30/2009, Martijn de Munnik (mart...@youngguns.nl) wrote: Of course we don't know which email addresses are valid so all mail for the domain is accepted on our servers. That is your problem to be fixed. Maybe this helps: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient --

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Martijn de Munnik
On Thu, 2009-07-30 at 07:06 -0400, Charles Marcus wrote: On 7/30/2009, Martijn de Munnik (mart...@youngguns.nl) wrote: Of course we don't know which email addresses are valid so all mail for the domain is accepted on our servers. That is your problem to be fixed. Maybe this helps:

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Charles Marcus
On 7/30/2009 8:26 AM, Martijn de Munnik wrote: I assume it is better to put the reject_unknown_recipient_domain and reject_unverified_recipient controls after the rbls en policy services. This way only address verification is needed when the mail passes the rbls en policies? Actually, I think

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Martijn de Munnik
On Jul 30, 2009, at 2:48 PM, Charles Marcus wrote: On 7/30/2009 8:26 AM, Martijn de Munnik wrote: I assume it is better to put the reject_unknown_recipient_domain and reject_unverified_recipient controls after the rbls en policy services. This way only address verification is needed when

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Charles Marcus
On 7/30/2009, Martijn de Munnik (mart...@youngguns.nl) wrote: Mmmm, I'm using transport maps to forward mail to the final mail server. So the verify should contact the remote server and I think that is almost as expensive as a RBL check. I don't think so, but am not certain... hopefully

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Noel Jones
Charles Marcus wrote: On 7/30/2009, Martijn de Munnik (mart...@youngguns.nl) wrote: Mmmm, I'm using transport maps to forward mail to the final mail server. So the verify should contact the remote server and I think that is almost as expensive as a RBL check. I don't think so, but am not

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread Charles Marcus
On 7/30/2009 10:51 AM, Noel Jones wrote: Address verify callouts are quite time consuming, so quite expensive - much more than an RBL lookup. However, when valid recipients are found in the cache, the impact on mail should be very low. Thanks for correcting me... that is good to know. So

Re: Catchall account and lots of spam in a short period

2009-07-30 Thread /dev/rob0
On Thursday 30 July 2009 07:48:25 Charles Marcus wrote: On 7/30/2009 8:26 AM, Martijn de Munnik wrote: I assume it is better to put the reject_unknown_recipient_domain and reject_unverified_recipient controls after the rbls en policy services. This way only address verification is needed

Re: Catchall account and lots of spam in a short period

2009-07-29 Thread Matthew D. Fuller
On Mon, Jul 27, 2009 at 11:57:20PM +0200 I heard the voice of mouss, and lo! it spake thus: I've seen many sites that refuse '+', but for now, no site that refuses '-'. I have entries in my alias file for several, sadly :| -- Matthew Fuller (MF4839) | fulle...@over-yonder.net

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 27, 2009, at 11:18 AM, /dev/rob0 wrote: To name one, I tried to get automobile insurance with GEICO, a large insurer in the USA. If I had access to my old virtual_alias_maps I could find many more who rejected the +. ATT, Coca Cola, nearly every bank or any site for a company that is

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 27, 2009, at 11:56 AM, Martijn de Munnik wrote: I guess I need prohibit the catch all account and offer the solution with the delimiter instead. That way all spam to bogus email addresses get rejected because the address does not exist. That is the best course, yes. But still I

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread Sahil Tandon
On Jul 28, 2009, at 2:05 PM, LuKreme krem...@kreme.com wrote: On Jul 27, 2009, at 11:18 AM, /dev/rob0 wrote: To name one, I tried to get automobile insurance with GEICO, a large insurer in the USA. If I had access to my old virtual_alias_maps I could find many more who rejected the +. ATT,

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 28, 2009, at 12:10 PM, Sahil Tandon wrote: Some large banks use first_l...@foo.com. What other sites use doesn't affect me. '-' is problematic because it is sometimes part of a person's actual name. I chose '_' over '.' because I had users who already used '.' as a first.last

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread /dev/rob0
On Monday 27 July 2009 16:57:20 mouss wrote: /dev/rob0 a écrit : Unfortunately, I have found that many Web programmers don't bother to read RFC's and find out what characters are allowed in email addresses. Many sites will not accept a + in your username. I think the old default qmail

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread mouss
/dev/rob0 a écrit : On Monday 27 July 2009 16:57:20 mouss wrote: /dev/rob0 a écrit : Unfortunately, I have found that many Web programmers don't bother to read RFC's and find out what characters are allowed in email addresses. Many sites will not accept a + in your username. I think the old

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 28, 2009, at 3:39 PM, mouss wrote: reported this to my boss, just to hear him saying I don't want extensions. I want _real_ addresses. I used to have an email address (since retired into a spam magnet). u...@example.com - All mail was fed to sa-learn --spam and reported to spamcop.

Catchall account and lots of spam in a short period

2009-07-27 Thread Martijn de Munnik
Hi, I'm using a couple of anti-spam techniques which successfully reject (5xx) or ban (ipfilter firewall rule) most spam before even getting in the queue. A couple of days ago about 2600 spam messages where delivered to an user with a catch-all account. These messages where classified as SPAM or

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Martijn de Munnik
On Mon, 2009-07-27 at 11:40 +0200, Martijn de Munnik wrote: Hi, I'm using a couple of anti-spam techniques which successfully reject (5xx) or ban (ipfilter firewall rule) most spam before even getting in the queue. A couple of days ago about 2600 spam messages where delivered to an user

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Simon Waters
On Monday 27 July 2009 10:40:34 Martijn de Munnik wrote: I'm using a couple of anti-spam techniques which successfully reject (5xx) or ban (ipfilter firewall rule) most spam before even getting in the queue. You use a LOT of blacklists, which probably results in more false positives than

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Charles Marcus
On 7/27/2009, Martijn de Munnik (mart...@youngguns.nl) wrote: Are there ways to block these spam attacks? Don't use catchalls for live/normal domains... -- Best regards, Charles

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Martijn de Munnik
On Mon, 2009-07-27 at 10:55 +0100, Simon Waters wrote: On Monday 27 July 2009 10:40:34 Martijn de Munnik wrote: I'm using a couple of anti-spam techniques which successfully reject (5xx) or ban (ipfilter firewall rule) most spam before even getting in the queue. You use a LOT of

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Simon Waters
On Monday 27 July 2009 11:13:34 Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register on. m...@desjors.nl pay...@desjors.nl deb...@desjors.nl They could use the recipient_delimiter for

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Seth Mattinen
Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register on. m...@desjors.nl pay...@desjors.nl deb...@desjors.nl etc. Then they use their mail client to filter the messages and put

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Martijn de Munnik
On Jul 27, 2009, at 7:18 PM, /dev/rob0 wrote: On Monday 27 July 2009 05:47:29 Simon Waters wrote: On Monday 27 July 2009 11:13:34 Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread Charles Sprickman
On Mon, 27 Jul 2009, Simon Waters wrote: On Monday 27 July 2009 11:13:34 Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register on. m...@desjors.nl pay...@desjors.nl deb...@desjors.nl They

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread /dev/rob0
On Monday 27 July 2009 13:52:07 Charles Sprickman wrote: On Mon, 27 Jul 2009, Simon Waters wrote: On Monday 27 July 2009 11:13:34 Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register on.

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread mouss
/dev/rob0 a écrit : Unfortunately, I have found that many Web programmers don't bother to read RFC's and find out what characters are allowed in email addresses. Many sites will not accept a + in your username. I think the old default qmail delimiter, -, is a better choice for those just now

Re: Catchall account and lots of spam in a short period

2009-07-27 Thread mouss
Charles Sprickman a écrit : On Mon, 27 Jul 2009, Simon Waters wrote: On Monday 27 July 2009 11:13:34 Martijn de Munnik wrote: Losing catchall seems to be the best solution but some of my customers want to create an emailaddress for every website the register on. m...@desjors.nl