Mail-Loop

[redeye]

I have a customer, which is using an autoresponder. Somehow spam is hitting that address, which the responder answeres. After that the mail returns because of an non-existing email-adres. From this point we have a loop, which is fl00ding spamd, which overloads the system.

How can we prevent this?

Using default installation, (latest) spamblocker config and SA 3.0x

 

[redeye]

* BUMP *

 

[nobaloney]

Turn off the autoresponder for that address.

It would be nice if there was a better answer but since autoresponders are designed to respond to an email, I'm not sure how easy it would be to fix this.

I've written DA staff to see if they can somehow fix this by adding a loop-counter local header when sending out the email, and checking it later when the mail comes back. Not easy because the loopcounter may be stripped, and if not stripped will end up in the body of the return mail, not in the headers.

But maybe doable.

Jeff

 

[DirectAdmin Support]

Hello,

edit your /etc/exim.conf.

Find this section:

userautoreply:
  driver = autoreply
  bcc = ${lookup{${local_part}} lsearch {/etc/virtual/${domain}/autoresponder.conf}{$value}}
  file = /etc/virtual/${domain}/reply/${local_part}.msg
  from = "${local_part}@${domain}"
  log = /etc/virtual/${domain}/reply/${local_part}.log
  no_return_message
  subject = "${if def:h_Subject: {Autoreply: ${quote:${escape:$h_Subject:}}} {Autoreply Message}}"
  to = "${sender_address}"
  user = mail
  [b]#once = /etc/virtual/${domain}/reply/${local_part}.once[/b]

Change it to look like

userautoreply:
  driver = autoreply
  bcc = ${lookup{${local_part}} lsearch {/etc/virtual/${domain}/autoresponder.conf}{$value}}
  file = /etc/virtual/${domain}/reply/${local_part}.msg
  from = "${local_part}@${domain}"
  log = /etc/virtual/${domain}/reply/${local_part}.log
  no_return_message
  subject = "${if def:h_Subject: {Autoreply: ${quote:${escape:$h_Subject:}}} {Autoreply Message}}"
  to = "${sender_address}"
  user = mail
  [b]once = /etc/virtual/${domain}/reply/${local_part}.once[/b]

Basically, you're adding a "once" file so that it knows if someone already got the email.

We had to comment it out because this file gets very very big over time... if you're willing to keep an eye on these files, then they're your easiest option

John

 

[nobaloney]

Why I didn't notice that is beyond me .

We'll probably fix it in SpamBlocker pro, by running something to clean up the once file.

Jeff

 

[redeye]

Just back in town. Sorry for my late response. I will check on the size of it ones in a while, but this works for me. Thank you very much.