One of my e-mail customers is currently on the receiving end of massive amounts of delivery failure notices as a "Nigerian scammer" seems to be using her address as its MAIL FROM field.
A lot of it is marked as spam by the SpamAssassin running on the inbound server (if they include the original message).
I added a manual content filter which removes more of the stuff.
I also temporarily blacklisted a few of the most active sources of bounce emails as they weren't servers any of my customers were likely to exchange actual e-mail with.
That has reduced the amount of spurious delivery failure notices my customer receives, however she's still getting ~1-2 such notices per minute.
Is there anything more I can do to help her get rid of this?
Best Answer
The mail your customer is receiving is called backscatter. Simply knowing that people call it that might help your Google searches for potential fixes. Here's a ruleset for SpamAssassin that might help.