possible idea for backscatter problem

[Matthias Andree]

On Sat, 10 May 2008, mouss wrote:

> This requires two things:
> - the original Message-Id is included in the bounce. A lot of scatter I 
> see doesn't include the original message or only include From, To, 
> Subject and the body.

Not necessarily. A certain amount of backscatter can be identified by
containing bogus Received: headers - for instance, "Received: from
gmx.net" is certainly forged since that's the domain, not a mail server.
A simple Postfix body_filter + header_filter combination kills these.
Another example is From:+mail address without my real name - I never
send without real name.

> But as with open relay, the real solution is to get the outscatter sites 
> fixed. At least, we hope that the large ones are already working on this 
> (they can't say they are not aware of the current storms)...

True enough.

Best regards

-- 
Matthias Andree