With the SMTP Proxy how do I deal with incoming mail to "dud" internal addresses ? We seem to get a lot of spam addressed to junk addresses at our domain, ie dlkshf@micromine.com.au
The SMTP server tries to send them back to source "No person with that name here" but coz it's spam and the accounts been shutdown/faked the mail bounces back to ASL and sits in the queue, I can rack up 100+ of these over a weekend.
What is the best way of automagically dealing with mail like this ?
Attached is a sample below.
Received: from [200.221.29.65] (helo=storm1.uol.com.br)
by micromine-gw.amnet.net.au with esmtp (Exim 4.10)
id 18rpqw-0002EE-00
for 43k54@micromine.com.au; Sun, 09 Mar 2003 09:43:51 +0800
Received: by storm1.uol.com.br (Postfix)
id 492EED549; Sat, 8 Mar 2003 22:44:05 -0300 (BRT)
Date: Sat, 8 Mar 2003 22:44:05 -0300 (BRT)
From: MAILER-DAEMON@storm1.uol.com.br (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: 43k54@micromine.com.au
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="A98F9D4C8.1047174245/storm1.uol.com.br"
Message-Id:
X-Spam-Score: 9.6 (+++++++++)
X-Spam-Flag: NO
X-Spam-Report: SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (9.6 hits, 5 required)
SPAM: HTTP_CTRL_CHARS_HOST (3.1 points) URI: Uses control sequences inside a URL's hostname
SPAM: HTTP_USERNAME_USED (1.5 points) URI: Uses a username in a URL
SPAM: SUPERLONG_LINE (0.4 points) BODY: Contains a line >=199 characters long
SPAM: SLIGHTLY_UNSAFE_JAVASCRIPT (0.7 points) BODY: JavaScript code which can easily be executed
SPAM: MIME_MISSING_BOUNDARY (3.9 points) RAW: MIME section missing boundary
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *18rpqw-0002EE-00*36vrtLe8U5Q*
This is a MIME-encapsulated message.
--A98F9D4C8.1047174245/storm1.uol.com.br
Content-Description: Notification
Content-Type: text/plain
This is the Postfix program at host storm1.uol.com.br.
I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.
For further assistance, please send mail to
If you do so, please include this problem report. You can
delete your own text from the message returned below.
The Postfix program
: host relaymxuol.mail.sys.intranet[172.26.5.70] said: 550
... User unknown [Usuario desconhecido] (in reply to RCPT
TO command)
--A98F9D4C8.1047174245/storm1.uol.com.br
Content-Description: Delivery error report
Content-Type: message/delivery-status
Reporting-MTA: dns; storm1.uol.com.br
Arrival-Date: Sat, 8 Mar 2003 22:44:00 -0300 (BRT)
Final-Recipient: rfc822; kcet@uol.com.br
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host relaymxuol.mail.sys.intranet[172.26.5.70]
said: 550 ... User unknown [Usuario desconhecido] (in
reply to RCPT TO command)
--A98F9D4C8.1047174245/storm1.uol.com.br
Content-Description: Undelivered Message
Content-Type: message/rfc822
Received: from 212.54.26.175 (a175d23.elisa.omakaista.fi [212.54.26.175])
by storm1.uol.com.br (Postfix) with SMTP id A98F9D4C8
for ; Sat, 8 Mar 2003 22:44:00 -0300 (BRT)
From: "Bryson Ed"
To:
Subject: F-r-e-e Credit Report !
Date: Wed, 20 Mar 2002 05:31:04 -0600
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0009_01C1C6FA.B19C03C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id:
This is a multi-part message in MIME format.
------=_NextPart_000_0009_01C1C6FA.B19C03C0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_000A_01C1C6FA.B19E74C0"
------=_NextPart_001_000A_01C1C6FA.B19E74C0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
This thread was automatically locked due to age.
