Re: Qmail and Bounce Message Spamming

[Scott Dudley <scott@sdudley.com>]

Charles Cazabon wrote:

Scott Dudley <scott@sdudley.com> wrote:
  

[...] one thing that I continue to see that troubles me is qmail-smtp
accepting messages with an empty envelope sender as long as the recipient is
a valid local user:
    

Why does that trouble you?  *Every* MTA should do that.
  

I'm troubled Charles because these messages are not bounced messages originated from this qmail server.  Instead, they originate elsewhere with the deliberate attempt of exploiting this functionality to SPAM.  I found several posts describing this very issue yesterday.

qmail doesn't care about the envelope sender address (with the exception of
the trivial blacklist that is control/badmailfrom).  If a message, regardless
of its envelope sender, has a valid, local/virtual recipient address, the
message is accepted and delivered.  And that's exactly what it's job is.

  

Please enlighten me.
    

Please explain why you think this perfectly normal MTA behaviour is a problem.

Charles
  

-- 

Regards,

Scott Dudley