Educause Security Discussion mailing list archives

Re: Do you send out Bounce Notifications?


From: Dale Fay <dalef () UMICH EDU>
Date: Thu, 13 Mar 2008 14:24:58 -0400

  In the past I have used Postfix and configured it reject/bounce messages
at the time of the connection. By doing that, it is up to
the sending server to notify the sender and keeps your server
from sending a bounce to a forged address.

On Thu, 13 Mar 2008, Clyde Hoadley wrote:

Every so often we get a notice from Spam Cop ref. an offending
e-mail.  The offending e-mail always turns out to be a Bounce
Notification.

We have been operating under the assumption that
sending Bounce Notifications was a requirement, but Spam Cop
recommends turning them off.  I can understand that but I'm
not 100% convinced that is the right thing to do.
Do you think sending Bounce Notices is the right thing to do
or is turning them off the better thing to do?

How are others handling the Bounce Notifications paradox?
Do you send them out, or file them in a 'bounced/postmaster'
InBox, or just log them, or just turn them off?

---

Current thread: