Re: clever spammer

David Grimberg <[email protected]> Wed, 03 Dec 2008 21:56:40 -0800
Newsgroups gmane.mail.spam.tmda.user
Message-ID <[email protected]>
Jeff,

The nice thing about using extension addresses is that if you ever start 
getting spam on one of them, you can simply black list it, and pick a 
new one to start using.  Personally I use pseudo key word addresses 
(search the archives) for a lot of my interactions with retailers as 
well as self directed mail.  One of the wonderful things about the 
pseudo key word address is that you can track which retailers are 
selling or sharing their email addresses just by observing who's using a 
particular pseudo key word address. Another feature of PsK addresses is 
you don't need to have access to TMDA or TMDA-CGI to generate one, you 
can make them up on the fly as needed.  Of course that's their main 
drawback as well since they aren't nearly as secure as a true keyword 
address because anyone who knows the pattern can create one at will.

Dave Steinberg wrote:
> Jeff LaCoursiere wrote:
>   
>> How do you filter spam that is rewritten to appear to come from yourself? 
>> I don't want to blacklist my own address or I won't be able to CC: myself 
>> on some things as I am known to do.
>>     
>
> I believe the canonical answer is "don't whitelist yourself".  In 
> addition, if your MTA can filter out mail that is forged from you (i.e. 
> not DK/SPF valid, not SPF auth'ed, whatever), then have it do that.
>
> You might setup a separate extension address that you use for such 
> things.  [email protected] or something, and in your filter use:
>
> to [email protected] ok
>
> Regards,
>
sentinel.vcf (text/x-vcard, 130 B)
begin:vcard
fn:David Grimberg
n:Grimberg;David
email;internet:[email protected]
x-mozilla-html:TRUE
version:2.1
end:vcard