[SpamCop-List] Re: Here's another spam that won't process correctly

[Frank Ellermann]

Chris F. Willoughby wrote:
 
> Fine. I'll just use my own addy.  Maybe everyone won't
> get all bent out of shape over a silly issue then. :)

It's not complete nonsense, it's even on topic:  As we know
spammers send their crap to anything with an "@" in it.  And
they forge the Return-Path - for the latter they take any
plausible (= tested + working) address not protected by SPF
FAIL (last step depends on the spammer of course).

If the primary target is completely bogus, no MX, no SMTP,
- an example is what at ever.invalid - it will never be sent
and cause no harm.  Otherwise it's sent.  If the receiver
accepts it before deciding that the target address doesn't
exist (bad idea, but shit happens) it would bounce it back
to the Return-Path.

But that was forged, the owner will be unhappy, forced to
understand SPF FAIL or what else, and for that reason it's
better to use obviously invalid addresses (there are more
reasons, legit users trying to reply by e-mail, etc.)

Not really silly.  You can always use what at ever.invalid for
invalid addresses.  In the worst case the DNS root servers
will survive a useless query for top level domain invalid.

                       Bye, Frank