[Mimedefang] blocking | and bad syntax in "from" address
Paul Heinlein
heinlein at cse.ogi.edu
Fri Jun 18 18:01:32 EDT 2004
On Fri, 18 Jun 2004, Joe Arnstein wrote:
> I've been noticing a lot of spam coming in with characters in the
> "from" address that don't work or are likely to be forged. These
> cause a backup in our outbound queue (lots of NDRs) so I'd rather
> they be rejected right off the bat.
>
> from=<_mohammad at ameritech.net>
> from=<Puri|puri at nt.com>
> from=<Rauly|rauly at ns4b.com>
> from=<.samuel at whereever.com>
> from=<80/joan.smith at spamcorp.com>
> from=<A/uykgYBAQAIAOgB9QAAAAAEAAApGQ at edailydiscounts.com>
>
> Do any of the rfc's say this is improper syntax or forbiden
> characters? Should I block this? Can I block it? And if so can
> someone recommend a good way to do it?
Anthony Howe's milter-spamc rejects such things with "553 5.1.[37]"
errors. I've never looked at his code, but it seems to work decently
on my home mail server (which doesn't need mimedefang's flexibility).
--Paul Heinlein <heinlein at cse.ogi.edu>
More information about the MIMEDefang
mailing list