BMF
01-11-2008, 02:16 PM
Hi there, i've noticed a pattern in my helpdesk.
almost all of my spam messages have the same 'Last Replied' address. I use a smarthost SMTP server for my tickets so they always leave my server via the same host. I notice that if someone sends a spam the 'Last replied' address is almost always going to be postmaster@hostname of my smarthost. I went into the ticket table and looked around in a 3.x install and scanned through something like 30,000 tickets and saw maybe 5 which were legitimate bouncebacks from tickets where the auto-reply was undeliverable.
Just a thought i thought I would throw out there...
:D
almost all of my spam messages have the same 'Last Replied' address. I use a smarthost SMTP server for my tickets so they always leave my server via the same host. I notice that if someone sends a spam the 'Last replied' address is almost always going to be postmaster@hostname of my smarthost. I went into the ticket table and looked around in a 3.x install and scanned through something like 30,000 tickets and saw maybe 5 which were legitimate bouncebacks from tickets where the auto-reply was undeliverable.
Just a thought i thought I would throw out there...
:D