What happens if a spamer sends email spam to my hamtrap@email.tld

Well, I shared your concern as well -- however, I poked around in the code a bit and it appears as if they attempted to account for that :-)

Essentially, each Virtual Server receives their own hamtrap and spamtrap aliases -- which dump ham and spam into special mailboxes just for that Virtual Server.

Once an hour or so, spamtrap.pl runs, and processes those.

When it runs against each mailbox, it compares the sender against a list of all valid email addresses for that domain and it's aliases -- and if the sender isn't defined in the Virtual Server, the email is ignored.

Feel free to take a gander in spamtrap.pl to see the details of how all that works. -Eric

This probably isn't a secure long-term solution, of course. I'm not sure what would be, though.

So, if spammer sends to my mail server email with sender mylogin@mydomain.com and receiver hamtrap@mydomain.com, it can learn my spamassassin to accept his mail? I think it is the security hole. We must add checking for sender auth and mail sources before accept mail to hamtrap and spamtrap addresses.

I had this question too. Was any security ever added? One possibility would be for Spamassassin to sign its messages and then verify the forwarded message as having come from itself.

Microsoft Azure leaders are always in demand. Obtaining a Microsoft Azure certification help you to boosts your career. You have the advanced knowledge and skills. You can also Enhance you skills by doing Microsoft Azure Exam to improve their competency. I just want to know that Will Microsoft Azure Certification help in getting a decent job?

For more info visit: https://www.certificationgenie.com/microsoft-azure-exams