help with spam

[Cefiar]

On Sunday 16 July 2006 19:41, Matthew East wrote:
> Has anyone seen these before, and does anyone know if there is something
> I can do about it?

Basically, this appears to boil down to the fact that mail posted from 
ubuntu.com addresses does not always pass through the ubuntu.com mail server 
(ie: using smtps & smtp auth), and instead comes from another mail server. As 
such, it's very hard to say "reject this address, it's faking our domain" if 
people elsewhere are legitimately using other mailservers to send mail from 
the ubuntu.com domain.

If mail was set up to only originate from ubuntu.com (ie: you send mail direct 
to ubuntu.com, which sends it out to the world), the lists, and in fact all 
ubuntu.com machines, could be configured to accept only mail that says that 
it is by people who have ubuntu.com addresses from the ubuntu.com mail 
servers and drop faked mail, or allow it from other specific servers if 
absolutely necessary.

Of course, this doesn't allow other people to easily check it, unless Ubuntu 
also publish things like SPF records.

Neither of these things remove the problem, but they at least do something 
towards working around it. Which is about all you can really do against spam 
and viruses faking a domain.

Welcome to the world of spam.

-- 
 Stuart Young - aka Cefiar - cef at optus.net