[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [suse-security] Postfix Backscatter
On Wednesday 22 September 2004 12:53, Uwe Debacher wrote:
> Recipient address rejected: User unknown in local recipient table;
> from=<> to=<airpark@....
It looks like someone spoofed your domainname in a spam run and you're
receiving the bounces from the systems where the messages where delivered.
Being the victim of domain spoofing before, I have good news and bad news.
The bad news is, you probably won't be able to stop the flow. You too now have
first hand experience why it is extremely bad to bounce or report spam (and
virusses alike) messages back to the apparent sender (MAIL FROM).
Conservatively speaking, there will be many thousands of systems who are
queuing bounces or warnings for you and unless these messages are either
delivered or rejected, they probably will keep on trying to deliver them for
a couple of days.
The good news is that probably in about a week time the majority of bounces
will either have been delivered, rejected or dropped out of the outgoing
queues, so if you have some patience, the problem will be solved by then
(unless someone seriously hates you and keeps on spoofing your domain).
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here