Perfect Server : misdirected bounce (complained by SpamCop)

Discussion in 'HOWTO-Related Questions' started by sufehmi, May 7, 2009.

  1. sufehmi

    sufehmi New Member

    Hi, I've setup some servers using the Perfect Server guide for Hardy :

    Today I got a warning from the datacenter, telling that one of my server has been used for spamming. It threatened to disconnect my server is nothing is done about it.
    And also there's a prospect that my server will be blacklisted by SpamCop, causing problem for everyone hosted in that machine.

    Personally I was very surprised, and curious : how ?

    Turned out the spammers are using misdirected bounces :

    OK, I thought this should be pretty easy to solve; years ago I was messing with OpenBSD 3.x as mailserver; and I think it's just changing a single setting in Amavis. But I couldn't remember which. Anyway, the "perfect server" howto doesn't use Amavis, so it had to be done in Postfix.

    Let's recap: I want to disable ALL bounces.

    With this in mind, I googled around. Unfortunately, everything I found was much more complex than I expected, and even then I doubt that it'd solve my problem WITHOUT the potential of causing more troubles.

    I thought it'd be as simple as a single line setting in, such as "smtpd_recipient_restrictions = reject_unknown_recipient". But, there's no such setting.

    The article at is useless too. Because it said "configure Postfix to reject all mail for non-existent recipients", but then the instructions are for local_maps; while the "perfect server" howto uses virtual_maps.

    At the moment I've read numerous articles and still stuck.
    Anyone got a hint on how to do this ? (disable all bounces)


    attached: warning from SpamCop :

    From: "Admin SS427" <[email protected]>
    To: [email protected]
    Date: Tue, 05 May 2009 16:07:46 -0700
    Subject: [SpamCop ( id:4111230831]Undelivered Mail Returned to Sender
    [ SpamCop V4.5.0.102 ]
    This message is brief for your comfort.  Please use links below for details.
    Unsolicited bounce from: appears to be sending unsolicited bounces, please see:
    This is an email abuse report for an email message received from IP source  on Tue, 05 May 2009 16:07:46 -0700
    For more information about this format please see
    To change ARF message format to SpamCop format change settings on your preferences page:
    ---------- Forwarded message ----------
    From: [email protected] (Mail Delivery System)
    To: [email protected]
    Date: Tue, 5 May 2009 19:07:44 -0400 (EDT)
    Subject: Undelivered Mail Returned to Sender
    This is the mail system at host
    I'm sorry to have to inform you that your message could not
    be delivered to one or more recipients. It's attached below.
    For further assistance, please send mail to postmaster.
    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.
                      The mail system
    <[email protected]>: mail for loops back to myself
    Final-Recipient: rfc822; [email protected]
    Original-Recipient: rfc822;[email protected]
    Action: failed
    Status: 5.4.6
    Diagnostic-Code: X-Postfix; mail for loops back to myself
    ---------- Forwarded message ----------
    From: "Alden Perez" <[email protected]>
    To: <[email protected]>
    Date: Tue, 5 May 2009 20:07:07 -0300
    Subject: Doping for your porksword!
  2. falko

    falko Super Moderator ISPConfig Developer

  3. sufehmi

    sufehmi New Member

    Thanks Falco.

    I've added soft_bounce = yes to postfix's /etc/postfix/

    It'll cause postfix not to send any bounces. Which is what I need.

    However, instead of dropping the email; postfix will defer it. So the problematic emails will stay in queues.
    Clearly I won't be able to use this setting for extended period. However, it helps to avoid being blacklisted by SpamCop for the time being :)

    So I'll keep looking. If anyone knows a more permanent solution, please do share it with us as well.

  4. sufehmi

    sufehmi New Member

    argh, I meant Falko :)

    Thanks, HS
  5. lieblm

    lieblm New Member

    Dear Harry,
    I am facing similar problem on my system. Thanks for the tip to switch on the soft_bounce, it temporarily works for me as well. If you find more permanent solution, please post it here. I will do likewise.

Share This Page