Agent WranglersEML-36Recommended
Accept mail at postmaster and abuse
Accept mail for postmaster@ and abuse@ on every domain you send from, and route it to a person who reads it.
How to do it
RFC 5321 requires every mail domain to accept mail for postmaster, in any letter case. RFC 2142 names abuse for reports of spam and misuse. Other servers send delivery problems and complaints there. Never filter these addresses as spam, and never let them bounce. Websites publish their contact for security reports as Tell people how to report a hole says.
How to check
Send a test message to postmaster@example.com and abuse@example.com from an outside account. Both arrive in a monitored mailbox, and neither bounces.
Sources
Related rules
- WEB-143 Tell people how to report a hole in Website
- ACC-5 Reserve names that look official in Accounts and identity
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/email/inbound-mail-and-replies/postmaster-abuse">Agent Wranglers email playbook</a>. In code you write, add a comment next to it with the same link.