On Wed, 2010-06-30 at 02:02 -0700, Daniel Lemke wrote:
> For a short time we receive several hundreds of non delivery notifications
> and other failure notices on one of our mailboxes.
> Most of them look very similar, containing Cyrillic charset and .ru
> addresses.
> Are there any special rules that are able to identify this kind of spam?
> As our company is small sized, we use a site wide Bayes which scores this
> mails negative (I’m not really sure, but I guess it does because sometimes
> we send a newsletter to a couple of customers, so receiving a (“real”) ndr
> from time to time is nothing special.
>
> I don’t know how to convert ndr to plain text so I paste one of those
> failure notices:
> http://pastebin.com/X9ewhwG4
>
> Daniel
>
BATV (if your MTA supports it) - overview
http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation
