Spammers Relaying Through Bounces

[Don Levey]

Kent wrote:
> On Mon, Sep 27, 2004 at 02:38:19PM -0400, Matthew Valites wrote:
>> Who's your ISP?
>
> I run my own mail server, nothing goes through ISP servers (just
> through their routers and whatnot).
>
I run my own mail server also - though I smart-host through my ISP.  Many
ISPs and other mail server owners blacklist mail coming in from dynamic IPs;
as a result, your mail won't get through unless you're static, and/or unless
that mail goes through your ISP's mail server.

>> Check the bounce message for what it says.
>
> The bounce gives the URL I posted: AOL considers me a spammer.
>
I'm assuming you talked to them, to make sure it's because of the bounces
and not just because you're in a dynamic IP block (from what IO can tell,
you're not).

>> I think "dig MX your.isp" should return mail servers that you can
>> relay through.
>
> I'd rather fix the problem--and quite being a forwarder for spammers.
>

Well, you could quit sending bounce messages, or you could filter/blocklist
your incoming connections.  Other than that, how would you distinguish
legitimate bounces from the spam/virus bounces?  BTW, this sounds more like
virus activity to me.
 -Don