From owner-freebsd-questions@FreeBSD.ORG  Tue Jul 26 06:14:44 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 49C7F16A41F
	for <freebsd-questions@freebsd.org>;
	Tue, 26 Jul 2005 06:14:44 +0000 (GMT)
	(envelope-from igorr@speechpro.com)
Received: from speechpro.com (speech-tech-2.ip.PeterStar.net [81.3.190.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C244343D53
	for <freebsd-questions@freebsd.org>;
	Tue, 26 Jul 2005 06:14:43 +0000 (GMT)
	(envelope-from igorr@speechpro.com)
Received: from sysadm.stc ([192.168.2.26])
	by s1.stc with esmtp (Exim 4.44 (FreeBSD)) id 1DxIhT-0005rK-6T
	for freebsd-questions@freebsd.org; Tue, 26 Jul 2005 10:13:59 +0400
Message-ID: <42E5D4BA.5090801@speechpro.com>
Date: Tue, 26 Jul 2005 10:14:18 +0400
From: Igor Robul <igorr@speechpro.com>
User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050518)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <200507231237.44829.bulk_mail@siegel-tech.net>
	<42E2DCAC.3060700@grokking.org>
In-Reply-To: <42E2DCAC.3060700@grokking.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Archived: Yes
Subject: Re: [OT Re: SPAM Problem]
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jul 2005 06:14:44 -0000

Greg Maruszeczka wrote:

>It's probably "blowback" resulting from the activities of worm-infected
>windows hosts. Someone you correspond with got infected and the worm
>subsequently propagated itself by picking your name from their address
>book and inserting it into the from: header of the message carrying the
>worm. Then, badly configured MTAs send "helpful" NDRs to the "sender"
>informing them that they're messages couldn't be delivered
>
>Pretty routine, really.
>  
>
In 2005.01 we have got 48605 bounce messages (instead of 4-10, our 
clients prefer to call phone) to our
 help desk email and I was _forced_ to close this address with 
semi-helpful message after "RCPT TO:" command about new address.
Now I reopened address and we get "normal" number of spam messages at it.