returned mails with own e-mailaddress and same recepient address

M

mdr

Verified User
Joined
Apr 19, 2006
Messages
45
Location
Zaventem
Lately myself and my clients get a lot of returned mails in their mailbox with their own address as sender and recepient address.

Mails are sent by random internetaccess lines all over the world.

Mails are getting returned with spampoints in the body.

Example message:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

save to /home/username/imap/example.com/name/Maildir/.INBOX.spam/new/
generated by [email protected]
retry timeout exceeded

------ This is a copy of the message, including all the headers. ------

Return-path: <[email protected]>
Received: from mail by server.hostname.tld with spam-scanned (Exim 4.67)
(envelope-from <[email protected]>)
id 1LKUSv-000EMI-FT
for [email protected]; Wed, 07 Jan 2009 10:12:45 +0100
Received: from localhost by server.hostname.tld
with SpamAssassin (version 3.2.5);
Wed, 07 Jan 2009 10:12:45 +0100
From: <[email protected]>
To: <[email protected]>
Subject: *****SPAM***** Britney's stolen home video
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on server.hostname.tld
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.5 required=2.5 tests=BAYES_50,HTML_IMAGE_ONLY_20,
HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MISSING_DATE,MISSING_MID,
RCVD_IN_BL_SPAMCOP_NET,URIBL_SBL autolearn=no version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4964720D.202F51FB"
Message-Id: <[email protected]>
Date: Wed, 07 Jan 2009 10:12:45 +0100

This is a multi-part message in MIME format.


<snip further spamreporting>


------------=_4964720D.202F51FB
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from p4fdeef2e.dip.t-dialin.net ([79.222.239.46])
by server.hostname.tld with esmtp (Exim 4.67)
(envelope-from <[email protected]>)
id 1LKUSv-000EMF-CK
for [email protected]; Wed, 07 Jan 2009 10:12:41 +0100
To: <[email protected]>
Subject: Britney's stolen home video
From: <[email protected]>
 
This has been discussed several times on this forum; please search for other posts and discussions.

I haven't found a way to stop this without stopping your abilty to send yourself email. Nevertheless I'm probably going to create an option for it in SpamBlocker within the next week or so.

Jeff
 
Jeff just as a suggestion:

There could be a check to see if the from address is the same as the to address. That you already know.

I was thinking the fail text could be something to remind the sender to send using another from email address. That way if you really are sending mail to yourself you know why its failing. Another from email address could be set up in your email client for the purpose of sending yourself something.
 
Floyd,

I'm aware of the suggestions you make, but even so, I'm not sure that would work for everyone. It will be an option in SpamBlocker as soon as I have some free time.

Note that I'm no longer doing any work on the SpamBlocker version now being distributed by DirectAdmin so before I can release any new work out of beta for DirectAdmin to include we have a few issues to clarify with DirectAdmin staff. I'm in discussion with them from time to time.

Jeff
 
This is what I did as a test and it works so far but I know there might some cases where I do want mail from the same address as the to address such. One that come to mind is paypal sends mail to me using the same from address as to address. Actually they use this format:

From: myaddress
Sender: [email protected]
To: myaddress

So I am not sure what is going to happen when implementing the below code but I will let you know what my results after a couple of days. I could alway put in a filter rule above this rule to accept the mail under certain other known conditions.

This is what I put in the system_filter.exim file:

Code: 
if $recipients is $sender_address
then

  fail text "You sent mail to $recipients from $sender_address \n You cannot send mail to yourself from yourself."  
  seen finish

endif
 
Yeah but what if you want to email yourself something. I guess if you use this in your filter you can never do that again?
 
scsi said:
Yeah but what if you want to email yourself something. I guess if you use this in your filter you can never do that again?
Click to expand...

If you only have one email address then yes that would be a problem. I have never only had one email address.

But even if I did have only one email address nothing prevents me from setting up another email address in my email client just for the purpose of changing the From header sending email to myself.
 
I'm not very good at all this filtering stuff, but is there a way to check if the message is local or from a foreign IP/etc, then filter it?
 
I am by no means an expert either but you probably want to experiment with $received_protocol.
 
You must log in or register to reply here.
Back
Top