From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <e89fac41fd90c941388e35f7c3d38f87@quanstro.net>
From: erik quanstrom <quanstro@quanstro.net>
Date: Mon,  7 Apr 2008 20:11:14 -0400
To: 9fans@9fans.net
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: [9fans] fake bounce spam
Topicbox-Message-UUID: 89f9caa8-ead3-11e9-9d60-3106f5b1d025

starting saturday, i've been getting an increasing amount of
fake bounce spam predending to be a undelivered mail
notice from MAILER-DAEMON or similar.  overnight i
received >500 such emails.  as an emergency measure, i applied
this terrible hack to smtpd:

; 9diff smtpd.c
/n/sources/plan9//sys/src/cmd/upas/smtp/smtpd.c:1175,1180 - smtpd.c:1175,1184
  				"recipients");
  			return -1;
  		}
+ 		if(1){
+ 			werrstr("rejected: /dev/null likely spam ");
+ 			return -1;
+ 		}
  		return 0;
  	}

unfortunately, if i really do send mail that bounces, i won't know
about it.

i suppose it would be much better to accept bounces only from addresses to which
email has been sent.  though that may mean maintaining a list (per user?).

- erik