[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Postfix Backscatter

On Wednesday 22 September 2004 12:53, Uwe Debacher wrote:

> Recipient address rejected: User unknown in local recipient table;
> from=<> to=<airpark@....

It looks like someone spoofed your domainname in a spam run and you're 
receiving the bounces from the systems where the messages where delivered. 
Being the victim of domain spoofing before, I have good news and bad news.

The bad news is, you probably won't be able to stop the flow. You too now have 
first hand experience why it is extremely bad to bounce or report spam (and 
virusses alike) messages back to the apparent sender (MAIL FROM). 
Conservatively speaking, there will be many thousands of systems who are 
queuing bounces or warnings for you and unless these messages are either 
delivered or rejected, they probably will keep on trying to deliver them for 
a couple of days.

The good news is that probably in about a week time the majority of bounces 
will either have been delivered, rejected or dropped out of the outgoing 
queues, so if you have some patience, the problem will be solved by then 
(unless someone seriously hates you and keeps on spoofing your domain).

Good luck!

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here