[sanesecurity] Re: Need help with external Spammer

  • From: Benny Pedersen <me@xxxxxxxx>
  • To: <sanesecurity@xxxxxxxxxxxxx>
  • Date: Thu, 17 Mar 2011 19:04:24 +0100

On Thu, 17 Mar 2011 14:28:55 +0100, Steffen Ille <steffen@xxxxxxxxxxxxxxx>
wrote:

> The Return-Path (and other Things) change in every Mail.
> Only the URL in the Body and (for now) the Subject remains the same.
> Date differs also from 1980 to today to 2013 !

are all return-path have same mx record ?

if so blacklist in mta based on that

check_mx_access hash:/etc/postfix/check_mx_access

# check_mx_access
mx.foo.example.org REJECT spamming mx found

postmap it



Other related posts: