Author: Renaud Allard Date: To: Chad Leigh CC: Exim Users List Subject: Re: [exim] rejecting bogus failure notifications generated
whenrejecting bogus mail with from = to
Chad Leigh -- Shire.Net LLC wrote: > I have been getting spam-bombed today with messages that have fake
> from: headers or fake senders that match the recipient or the to: header
>
> I put in a couple of acls that reject when the from: header matches
> the to: header and the sender is not authenticated and another when
> the sender matches the recipient(s) and the sender is not
> authenticated and it has blocked over 200 spams in the last 30-45
> minutes.
>
> however, now I am getting mail bombed from stupid mailers that were
> trying to send the spam in the first place. Since my own address is
> listed as the sender, it reports the failure to me, which failure I
> caused in the first place.
>
> Is there anything I can do about that?
>
You should probably implement BATV. Have a look in the doc at "40.47
Bounce address tag validation"
The problem is that won't stop today spam but will block further attempts.
