[lbo-talk] Query re: Bizarre "Returned Mail" Messages

budge budge at el-pleasant.org
Fri Jun 20 12:00:19 PDT 2003


On Fri, 20 Jun 2003 at 1:31pm Kelley wrote:

[snipped all true stuff]


> Set a filter rule to dump them all in the trash. Find some
> common characteristic, like "Subject: Returned mail: see
> transcript for details".

yeah, if you're not postmaster@ i guess you can get away with that solution :-)

but there's another thing it might be, a joe-job[1]. considering some of the addresses in the bounce it sure looks pretty spammy. (but i didn't so an exhaustive analysis either.) but it could be BOTH a joe-job and a worm. there are rumors around that some spammers have started using worms to carry their spam payload to vulnerable peecees and then launching spam runs from them, just script kiddies doing their DDOS's.

we've recently had a huge upwing in joe-jobs hitting all the users on one of my work domains. the thing is about filtering on them, if you get a real bounce message, you'll miss it and assume the person you mailed got your message.

[1] joe-job: when a spammer uses your return address on a spam run so that you get all of her bounces you are the victim of a joe-job. no, it is not named for me.

--

no Onan

"superior sound quality"



More information about the lbo-talk mailing list