Comments on: Master of your mailbox: an email alias for every site you leave your address

By: Digital creed

Digital creed — Fri, 12 Mar 2010 15:47:43 +0000

Great articles & Nice a site�.

By: safentrix

safentrix — Fri, 12 Mar 2010 10:07:30 +0000

Really informative article. Thanks for your posting. Great work

By: whmcs themes

whmcs themes — Tue, 02 Feb 2010 13:36:02 +0000

Very classy looking ! Great idea, love it !

By: Amedee Van Gasse

Amedee Van Gasse — Thu, 07 Jan 2010 10:12:49 +0000

The + trick isn’t specific for Gmail, it’s a default feature of Postfix (and other mail daemons too, I guess).
I have reconfigured my Postfix to use – in stead of +:

recipient_delimiter = -

@Benjamin: it is easy to forge email headers. The SMTP protocol has not security whatsoever. A spammer can put anything in the To and From headers. The only thing that matters for a mail server, is the RCPT TO command. That’s not sometjing you always see in your mail headers, most of the times you only see it in the logs of your mail server. Very difficult to debug if you don’t run your own server.
Just Google for “smtp telnet” for more info.

By: designer

designer — Mon, 16 Mar 2009 12:22:30 +0000

Thanks for sharing these usefull informations.

By: Ben the cs reapz

Ben the cs reapz — Wed, 11 Feb 2009 15:49:39 +0000

Tried it with no success. you might wanna split the code in two, the injector isnt working.

By: Michael Melen

Michael Melen — Fri, 23 Jan 2009 23:59:35 +0000

I really enjoyed this post (not that I didn’t enjoy the others as well ;) )- nice work man.

By: Maxime

Maxime — Fri, 16 Jan 2009 08:38:35 +0000

Hi Tom, you hosted exchange provider should provide you with a selection of spamfiltering solutions, please inform!

Regards!

By: Tom Jarvis

Tom Jarvis — Fri, 16 May 2008 11:28:23 +0000

Pascal,

This is exactly how I have been running my mailbox, and it works really well. However recently I have changed from IMAP or POP based email to having a Hosted Exchange solution.

It seems that the advice above used to be industry standard advice when email was something that could be trusted. However now as most email is unwanted spam, the industry are stopping catch-all addresses, especially on Hosted Exchange services.

I’m getting to the point where I am having to redesign my mailbox, so that I have an “untrusted” box, and then create aliases for new trusted boxes. So that I can then dump any alias which starts spamming me.

It’s a bit of a pain though, as the aliases have to be created in advance before the address will work! Especially as I use to just sign up on a site and create a random email address!

Best Regards

By: Michael Clark

Michael Clark — Fri, 04 Apr 2008 03:17:54 +0000

Hi Benjamin, I’m referring to the email server that receives the email. It is up to that server to deice what to do with a BCCed recipient email address. I have no idea how various web mail providers handle the problem.

It’s also possible that any intermediate mail server (a mail service like a forwarder) might strip out any headers, although they still have to keep the ultimate recipient in mind since they are forwarding the mail.

Figuring out who is selling my email address is a huge reason why I run my own mail server. It allows me to ensure that the original address email was sent to will be in the headers.