Re: [Hampshire] SMTP bounce

Top Page
Author: Hugo Mills
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] SMTP bounce

Reply to this message
gpg: failed to create temporary file '/var/lib/lurker/.#lk0x58145100.hantslug.org.uk.31440': Permission denied
gpg: keyblock resource '/var/lib/lurker/pubring.gpg': Permission denied
gpg: Signature made Wed Nov 25 14:04:42 2009 GMT
gpg: using DSA key 20ACB3BE515C238D
gpg: Can't check signature: No public key
On Wed, Nov 25, 2009 at 05:55:05AM -0800, Isaac Close wrote:
> Personally, I always configure my email services to reject unknown
> recipients, don't really need to elaborate why.
>
> Is it becoming common practice to sliently drop messages instead of
> bouncing them (because of forged return-paths) ?


Yes. If you send a bounce message for unknown recipients, you get
used for backscatter attacks, where the spammer forges the source
address, sends mail to a false destination address at your site, and
the bounce ends up where they want it to go.

If you send bounce messages arbitrarily, without some fairly heavy
anti-spam checking, you're a part of the spam problem (unwittingly or
not).

Hugo.

-- 
=== Hugo Mills: hugo@... carfax.org.uk | darksatanic.net | lug.org.uk ===
  PGP key: 515C238D from wwwkeys.eu.pgp.net or http://www.carfax.org.uk
  --- We teach people management skills by examining characters in ---   
            Shakespeare.  You could look at Claudius's crisis            
                   management techniques, for example.