|
For those not familiar with a "Joe-Job" this refers to spam where the culprit spoofs the "From" or "Reply-To" with someone elses real email domain so that that user gets all the bounces and rejections for the spammers broadcast.
In many cases, the spammer simply inserts the domain of the sender and generates a random username to creat the "To:" (i.e. mailto:sjdkghsf@mailserverdomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - sjdkghsf@mailserverdomain.com ) so that the victim mail server of the spam attempt also gets all the rejections and bounces.
This is a terrible problem as there is no way to track the spammer and the victim server suffers from all the extra traffic.
What I suggest is a variation of the "Reject if Mail From = Mail To" feature. Create a new check box to "Reject if recipient domain = (sender domain or reply-to domain)". Generally the sender of outside email to a mail server should be from a different domain than is local to the mail server. The only time it would not would be if the sender is trying to spoof the mail server. (At least as far as I can think of)
Would this be possible to do?
|