[SLL] back scatter?

[Kurt Buff]

On Tue, May 13, 2008 at 12:30 PM, Chuck Wolber <chuckw at quantumlinux.com> wrote:
> On Tue, 13 May 2008, billw at onedrous.org wrote:
>
>  > I was reading freedom-to-tinker.com yesterday and learned that the
>  > phenomenon is known as backscatter, and that there are good plugins that
>  > will drop bounces if they didn't originate on my mta.
>
>  How would you tell if they originated on your MTA? You can't trust the
>  header beyond what the bouncing server adds to it.
>
>  ..Chuck..

This has been the subject of a lot of discussion on the postfix,
spamassassin and maia mailguard lists. For the latter two, the vbounce
plugin is supposed to help (though I haven't noticed much difference.)
For postfix, header checks for incorrect relay headers (IIRC - google
for it - there are references to the backscatter readme) are supposed
to be helpful.

Kurt