Why not just “bounce” spam?
Never “bounce” a spam. It’s not only pointless since the forged Return-Path address is never monitored by the spammer but it also generates even more usless email traffic on an already overburdened Internet, ultimately costing us more in connection fees. In addition, many forged return addresses belong to an entirely innocent third party who’s only link to a batch of a particular spam would be that of receiving potentially hundreds of thousands of bounces to a spam they never sent were “everyone” to employ such a system. Please, “challenge-response” systems are already bad enough – thank God they seem to have fallen somewhat out-of-favor. Bouncing spam would amount to a huge, distributed mail bomb to whatever individual was so unfortunate as to have their email address forged by some spammer – more specifically, many of the “trojan spambots” that infect hundreds of thousands of Windows systems use real email addresses harvested from the address books and saved emails on those systems a