It is rumored that on or about 2002-07-08 8:37 PM -0700, Matthew Hill 
wrote as follows:
>I do have the unknown account set up.  If i did not have it all the 
>bounces would go away.  The point is they say they are coming from 
>this domain.  It looks to me like they are not really but how do i 
>find out who sent them and then to not use my domain.
>Matthew
>

Matthew

By having an "unknown" account you are virtually inviting spam. Any 
harvester that tries a dictionary attack on you will get dozens of 
"valid" addresses to which they will then send spam. They will resell 
these "validated" addresses to other spammers.

Anybody anywhere can forge a return address in your domain. In fact 
the KLEZ virus is built to generate forged FROM headers.

Unsophisticated users will be convinced you sent them  mail (with a 
forged FROM) no matter what you do. ISPs should have the brains to 
detect a forged header. Unfortunately many do not. If you have an 
"unknown" account, then ANY forged address in your domain will appear 
to be valid and you will be swamped with misdirected complaints.

Do yourself a favor and close the "unknown" account!

-- 
Neil

Neil Herber, RGD
Corporate info at http://www.eton.ca/
Eton Systems, 15 Pinepoint Drive, Nepean, ON, Canada K2H 6B1
Tel: (613) 829-4668


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to