[Mimedefang] bounces

[Paul]

>No, that's not true.  MIMEDefang never generates a bounce message.
>All it does is return a "554" SMTP error code.  That's it.

But my logs show the message being sent by 'mailnull', which is what MD runs under. I was incorrect as to it being a 'bounce' message. It's the notification message MD sends to tell me it quarantained a message. Which apparently contains the spam and thus gets bounced.

>The safest way to allow bounce messages through is to omit spam-scanning
>for "local" messages, where "local" is determined by the IP address of
>the relay.

That will work unless someone spoofs the IP. But that is pretty complex and beyond the reach of most spammers. I would only omit spamscanning for messages generated on the server itself, not even the systems within the local network.