[clue-tech] spam-jacked

[David L. Willson]

On Tue, 2006-11-21 at 17:53 -0700, Keith Hellman wrote:
> On Tue, Nov 21, 2006 at 04:04:37PM -0700, David L. Willson wrote:
> > Does anyone have an idea what to do when a spammer uses a valid email
> > address, that you're responsible for, as the return address on their
> > spam?  My users (and I) are getting flooded with NDRs and rejection
> > messages from anti-spam systems that think we're sending things we're
> > not sending.  Any ideas?
> 
> I've had the same issue as well.  I used to procmail these into
> /dev/null (the procmail rc file was auto-generated from a list of known,
> valid addresses at the domain).  My newest ISP provides the same feature
> on their end, so I don't see these messages anymore.

How do you differentiate between a real NDR and an NDR from a message
you never sent?  Similarly, how do you differentiate between a genuine
polite spam-filter notification that "I'm not passing your message on."
and one that is in response to a message you never sent?