adding username: :fail: to /etc/aliases

[bamm]

Hello,

I have a user on one of my servers that is getting inundated with bounces from a spammer sending out spam and using my users email address as the return email address. When I say inundated I mean literally 1000s a day. The thing is, the spammer is not using the users domain but using their username@servername.

This user has their default email address set to :fail:, but it is my understanding that that rule only applies to email sent to [email protected] and is bypassed when email is sent to the user@servername.

If I am thinking correctly and if the above is correct if I add an entry to /etc/aliases: username: :fail: then this will perform just like the :fail: entry for their [email protected], for [email protected]? If this is true, are there any negatives that I should be aware of in doing this?

I did do a search through the forum for this but didn't find anything using several different search terms so I apologize if this is discussed somewhere and I just missed it.

Thanks in advance for any advice.

 

[webignition]

The best option would be to try it first with a test account and simply give it a go.

 

[bamm]

worked like a charm and i haven't found any other issues so far from doing this.

 

[SageBrian]

I'm curious if this would affect mail sent using forms?

Some forms send mail using the 'username@server' address.

Now, if I have Sender Verification on my server, any email coming to me, from your forms, will be rejected since 'username' is set to fail.

If sender verification still works (since the mail script hopefully puts a valid email in the reply to), then this would be great. I don't think any of my customers use the username for email, and it does fill up on some accounts.

I wish when we 'show disk space used' in cpanel for email accounts actually showed the username space also.

 

[rs-freddo]

Some forms send mail using the 'username@server' address.

Now, if I have Sender Verification on my server, any email coming to me, from your forms, will be rejected since 'username' is set to fail.

username@lsearch;/etc/localdomains "${if !eq {$header_From:}{}{$header_sender:$header_From:}fail}" Fs

add this to the rewrite section of exim.