Re: [PLUG] Spammers Using My Domain

[Stephen Gran <steve@lobefin.net>]

On Sat, Jun 26, 2004 at 05:09:47AM -0400, Paul said:
> What to do?  I'm getting an increasing number of rejected e-mail
> notifications due to spammers using my domain name.  My domain is
> registered with http://godaddy.com and I use their service to forward
> e-mail addressed to my domain to my Comcast account.  Is there a way to
> use SPF in this case?  Should I run my own mail server?  What else can I do?

First - verify that the recipient exists, rather than just accepting
email for any address@your.domain.  Then, set up a rule that rejects
bounces to addresses that never actually send email but exist for system
accounts (root, bin, lp, etc).  That way you cut way down on the joe-job
bounce storm.  I have had to do that here, as I was getting a couple of
hundred of these a day.  Now I only get bounces directed to one of my
real email addresses, at least, and I am using some spamassassin rules
to cut down on actually seeing them.

Things like:
header VIRUS_WARNING            Subject =~ /^\{Virus\?\}/
describe VIRUS_WARNING          Unhelpful 'virus warning'
score VIRUS_WARNING             100

header VIRUS_WARNING20          Subject =~ /^VIRUS \(.*\) IN YOUR MAIL$/
describe VIRUS_WARNING20        Unhelpful 'virus warning'
score VIRUS_WARNING20           100

and so on.

HTH,
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | Love conquers all things; let us too    |
|  steve@lobefin.net             | surrender to love.   -- Publius         |
|  http://www.lobefin.net/~steve | Vergilius Maro (Virgil)                 |
 --------------------------------------------------------------------------

Attachment: pgpyttiTch6qV.pgp
Description: PGP signature