One more reason not to use an autoresponder

I am doing some tests on a Debian machine with the Debian
2.4.2
package and the postfixadmin vacation.pl script and I
noticed that
because the vacation program sends a mail out on the
recipient's behalf
the sender is now a penpal. If a spammer sends out more than
one
message using the same sender address the second and
subsequent mails
get a lower score. Just an observation. This program uses
sendmail so
I personally will fix this by disabling content_filter for
the pickup
service.

Gary V



------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Gary V wrote:
> I am doing some tests on a Debian machine with the
Debian 2.4.2
> package and the postfixadmin vacation.pl script and I
noticed that
> because the vacation program sends a mail out on the
recipient's behalf
> the sender is now a penpal. If a spammer sends out more
than one
> message using the same sender address the second and
subsequent mails
> get a lower score. Just an observation. This program
uses sendmail so
> I personally will fix this by disabling content_filter
for the pickup
> service.
>   

an auto-responder should use "<>" as the
envelope sender...

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

> -----Messaggio originale-----
> Da: amavis-user-bounceslists.sourceforge.net
[mailto:amavis-user-
> 
> Gary V wrote:
> > I am doing some tests on a Debian machine with the
Debian 2.4.2
> > package and the postfixadmin vacation.pl script
and I noticed that
> > because the vacation program sends a mail out on
the recipient's
> behalf
> > the sender is now a penpal. If a spammer sends out
more than one
> > message using the same sender address the second
and subsequent mails
> > get a lower score. Just an observation. This
program uses sendmail so
> > I personally will fix this by disabling
content_filter for the pickup
> > service.
> >
> 
> an auto-responder should use "<>" as
the envelope sender...

Oh, really?

Is it stated by an RFC or is it just a commonsense
practice?

Thanks,

Giampaolo


> 
>
------------------------------------------------------------
-----------
> --
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2
express and take
> control of your XML. No limits. Just data. Click to get
it now.
> http://sourcefor
ge.net/powerbar/db2/
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-userlists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user

> AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/ho
wto/

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

mouss wrote:

> Giampaolo Tomassoni wrote:
>>> -----Messaggio originale-----
>>> Da: amavis-user-bounceslists.sourceforge.net
[mailto:amavis-user-
>>>
>>> Gary V wrote:
>>>     
>>>> I am doing some tests on a Debian machine
with the Debian 2.4.2
>>>> package and the postfixadmin vacation.pl
script and I noticed that
>>>> because the vacation program sends a mail
out on the recipient's
>>>>       
>>> behalf
>>>     
>>>> the sender is now a penpal. If a spammer
sends out more than one
>>>> message using the same sender address the
second and subsequent mails
>>>> get a lower score. Just an observation.
This program uses sendmail so
>>>> I personally will fix this by disabling
content_filter for the pickup
>>>> service.
>>>>
>>>>       
>>> an auto-responder should use
"<>" as the envelope sender...
>>>     
>>
>>   

> I said auto-responder when I mean a vacation style
auto-responder. see 
> below.
>> Oh, really?
>>
>> Is it stated by an RFC or is it just a commonsense
practice?
>>   

> Any dedicated address may be chosen, provided some care
is taken. the 
> empty sender has the advantage of being a simple choice
(no need to 
> create a dedicate address) if you don't want to get
bounces (which is 
> the case for vacation responders, but may not be good
for other 
> responders. but these require dedicated addresses and
scripts anyway).

> In any case, using the original recipient idea is the
worst choice.

> See section 3.3 of
>         http://www.
rfc-editor.org/rfc/rfc3834.txt
> for more infos.

Good idea. I will modify the supplied script.

Gary V


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/