Forum Moderators: phranque
The spam deluge has made this strategy almost unusable now. Spam is addressed to common usernames like "info", past employees no longer receive business communications but live forever in spam lists, bounces from worm/virus e-mails that forged a return address flood in... The percentage of valid e-mails recovered is infinitesimal.
In a few important domains, I continue to review catch-all e-mail and let my spam filter do the initial sort, but the load of garbage is so great that I'm thinking of deactivating this and letting them all bounce. Am I the last person on the planet to even attempt to capture mis-addressed e-mails, or are there fellow-sufferers out there?
One thing I've done is to anticipate the most common errors and set up forwarding rules for those. For example, by far the most common error I see is the sender forgetting what the organization's naming protocol is and guessing incorrectly. Hence, if John Jones is johnj@example.com, items will regularly end up being sent to jjones@example.com. So, I set up a forward for "jjones" and perhaps even "john" - this corrects the most common errors without needing a catch-all account.
I'm still having difficulty flipping the final switch, though, on my last few domains with that feature...
My surname is extremely easy to mis-spell, and I have a significant number of communications from people I wouldn't want to miss picked up by catchalls.
Some of the mis-spellings are most odd ... makes me wonder sometimes if alcoholism is rife in the industries I cover :)
And yes - I get maybe 2000 emails on it a day, mostly from viruses - autogenerating usernames for a domain - and then hitting things really hard.
But - I still catch several emails a week that I am glad I could catch. I'm too wondering when the "downloading 1822 email" for the sake of 1 of minor importance no longer is worth it.
My recommendation is that they be eliminated altogether. Years ago before the UCE was out of hand, a catch-all account was an added feature of email. Today, it is a detriment.
Over the next two weeks, we are removing all catch-all accounts and will be disabling the feature in our email program. If there is one thing that is feeding the UCE, it is the catch-all accounts. I'd say at least 30-50% of the UCE received is to a catch-all account.
Users are viewing their catch-all accounts with a Preview Pane open. So, when they click the email subject link to review the body in the Preview Pane, I do believe they are phoning home and sending a message to the sender that the mail was read. This keeps that catch-all account name in the UCE list as it is a valid account (no bounce).
Our new plan is to tell clients to give us all email addresses that they think should be set up as forwards due to misspellings. We then set those up as aliases with a forward and then forget about them.
Jim
Common problems arise from employees who have left a company, and the eternal misspellings. The latter can be dealt with by defining some redirects, but an end-user receiving a bounced mail need to have more information than the simple default error message.
If I get an address wrong and the email bounces, then I should receive an error message which is tailored to the situation. Once, I emailed someone at a large company. I spelt the guy's name wrong, but it was a common name. The bounce came back saying something along the lines of "The user is unknown, but you could have been trying to contact one of the following:" followed by a short list of similarly-named people working for the company. After that, there were links to the company website, a general contact address and to a contact form on the website. The person I wanted to contact was in the list, I was able to update my address book and I knew how to spell his name in the future when preparing contracts, etc.
That showed to me that the email admin had taken the effort to manage the email service well, and it was great from a customer-service viewpoint - better than the catch-all which justs risks your important email being deleted with a million spam emails.
My database of keywords is growing bigger everyday. And my keyword list is becoming exceedingly efficient in sorting out spam mails from business mails
>>> About 2000 a day
Is that from one domain? That's an incredible number.
2000 spam messages a day seems like a lot, but I suppose it depends on the number of domains and the characteristics of those domains. I'm finding a few hundred a day for popular domains is typical (i.e., domains that have been around for a few years, have good inbound linkage, etc.). Some of the spam comes to real addresses, the rest to bogus or guessed addresses.
I have removed them from everywhere that I can remember putting them and have also offered to remove them FOC for Ex Clients who historically may still have them from years ago.
Users are viewing their catch-all accounts with a Preview Pane open. So, when they click the email subject link to review the body in the Preview Pane, I do believe they are phoning home and sending a message to the sender that the mail was read. This keeps that catch-all account name in the UCE list as it is a valid account (no bounce).
If you don't reply to the spam you get, and your e-mail is set to *not* "auto-load" inline images, then what's the harm with Catch-All? Just because you "Catch-All" doesnt' mean you have to "read all". You can. have a list of good addresses and common spelling of them, which you read, and then auto-delete the rest.
To me, bouncing some addresses, and not bouncing others, is effectively telling the spammers which e-mail addresses are valid.
So far, my favorite XP SP2 change is the fact in-line images are not auto-loaded in Outlook Express.