From: Robert L Mathews (no email)
Date: Fri Mar 01 2002 - 02:26:14 EST
At 2/28/02 7:37 PM, David Morton wrote:
>Spammers are getting trickier - now they are dynamically chaning the
>"From" line to something fom my own domain, looking like we are
>spamming our own customers. (Is this news to anyone?)
It's perhaps more likely that the spammer set the "From" address to a
non-compliant address like "Joe", and postfix helpfully added your host
to the end of it when it received it (for example, converting "Joe" to
""). Sendmail does the same thing.
This is a cause of endless problems here, as users are always writing to
us thinking we've spammed them when they see our domain name in the
"From" or "To" headers. For example, if an idiot spammer uses:
From: SpecialOffer
To: Users
... it ends up looking like this when it reaches the user's mailbox:
From:
To:
I can't really blame naive users for incorrectly thinking we sent it to
all our users; I've had a couple of extremely angry customers who
threatened to cancel their service because they thought we sent them
nasty porn, and didn't seem inclined to believe my explanation.
Wietse has suggested that this will be configurable in the future. From
the ChangeLog: "Open problems: Medium: make address rewriting on/off
configurable for envelopes and/or headers." I'd certainly put this at the
top of my wish list.
-- Robert L Mathews, Tiger Technologies "The trouble with doing something right the first time is that nobody appreciates how difficult it was." - To unsubscribe, send mail to with content (not subject): unsubscribe postfix-users
|
|
|