Re: [Exim] .forward files and spam counterfeits

On Thu, 27 Nov 2003, John (TJ) Penton wrote:

| On Thu, 27 Nov 2003, Alan J. Flavell wrote:
|
| > 1. Spammer sends mail to victim@??? with the envelope
| >
| > 2. the mailer at elsewhere.example obeys the user's .forwarding
| > arrangements and offers the mail to us, with their local address here
| > as recipient, and their elsewhere.example address as envelope sender.
| > Sometimes (but not always) their elsewhere.example address also
| > appears in the To: header.
| >
| > 3. We recognise the stuff as spam, and refuse to accept it.
|
| Suggestion:
|
| Don't refuse the spam, simply drop it silently. No bounce message will be
| generated.
|
| This does have the disadvantage that false-positive spam detections go
| undetected by any genuine sender (they won't receive a bounce message).

Hmm - this is very dangerous; we're not too keen.

Also, still leaves the problem of how to detect the situation in the first
place, assuming we're not going to blackhole *all* spam...


--
Chris Edwards, Glasgow University Computing Service