{"id":5639,"date":"2025-11-26T10:34:54","date_gmt":"2025-11-26T09:34:54","guid":{"rendered":"https:\/\/hostinkos.com\/blog\/?p=5639"},"modified":"2025-11-26T10:34:55","modified_gmt":"2025-11-26T09:34:55","slug":"cfare-eshte-backscatter-dhe-si-te-shpetoni-nga-stuhia-e-dsn-ve-kur-email-i-juaj-gjeneron-spam-in-e-vet","status":"publish","type":"post","link":"https:\/\/hostinkos.com\/blog\/cfare-eshte-backscatter-dhe-si-te-shpetoni-nga-stuhia-e-dsn-ve-kur-email-i-juaj-gjeneron-spam-in-e-vet\/","title":{"rendered":"\u00c7far\u00eb \u00ebsht\u00eb Backscatter dhe si t\u00eb shp\u00ebtoni nga “Stuhia” e DSN-ve kur email-i juaj\u00a0gjeneron\u00a0 SPAM-in e vet?"},"content":{"rendered":"\n

N\u00eb bot\u00ebn e emailit, pak gj\u00ebra jan\u00eb m\u00eb irrituese se marrja e qindra, apo mij\u00ebra, mesazheve “Successful Mail Delivery Report” ose “Non-Delivery Report (NDR)” p\u00ebr \u00e7do minut\u00eb. N\u00ebse e keni p\u00ebrjetuar k\u00ebt\u00eb “stuhi” notifikimesh, nuk jeni vet\u00ebm!<\/p>\n\n\n\n

Ky fenomen shpesh quhet “Backscatter”<\/strong> (Shp\u00ebrndarje Kthyese) dhe tregon se serveri juaj i emailit po b\u00ebhet, pa dashje, bashk\u00ebpun\u00ebtor i spammer-ave, duke gjeneruar<\/strong> vet\u00eb k\u00ebto raporte d\u00ebshtimi dhe suksesi.<\/p>\n\n\n\n

Lexoni m\u00eb posht\u00eb p\u00ebr t\u00eb kuptuar si funksionon ky sulm tin\u00ebzar dhe cilat jan\u00eb dy hapat thelb\u00ebsor\u00eb q\u00eb duhet t\u00eb nd\u00ebrmarr\u00eb \u00e7do p\u00ebrdorues dhe administrator sistemi p\u00ebr t\u00eb mbrojtur llogarin\u00eb e tyre.<\/p>\n\n\n\n

\n\n\n\n

1. Si Funksionon Mekanizmi i Backscatter-it<\/h3>\n\n\n\n

Backscatter ndodh kur nj\u00eb sulmues falsifikon adres\u00ebn tuaj t\u00eb emailit dhe serveri juaj (p\u00ebrmes DSN-ve) d\u00ebrgon p\u00ebrgjigje automatike n\u00eb at\u00eb adres\u00eb.<\/p>\n\n\n\n

Faza A: Falsifikimi i Adres\u00ebs (Spoofing)<\/h4>\n\n\n\n

Nj\u00eb spammer d\u00ebrgon nj\u00eb v\u00ebllim t\u00eb madh t\u00eb post\u00ebs s\u00eb pad\u00ebshiruar (SPAM) n\u00eb internet. N\u00eb vend q\u00eb t\u00eb p\u00ebrdor\u00eb adres\u00ebn e tij, ai vendos adres\u00ebn tuaj t\u00eb emailit si Adres\u00eb Kthyese (Return-Path:<\/code>).<\/strong><\/p>\n\n\n\n

Faza B: Gjenerimi i DSN-ve<\/h4>\n\n\n\n

Kur serverat e tjer\u00eb t\u00eb post\u00ebs elektronike marrin k\u00ebt\u00eb SPAM t\u00eb falsifikuar, dy lloje t\u00eb mesazheve gjenerohen dhe kthehen te adresa juaj:<\/p>\n\n\n\n

    \n
  • Raportet e D\u00ebshtimit (NDR):<\/strong>\u00a0P\u00ebr adresat q\u00eb\u00a0nuk<\/em>\u00a0ekzistojn\u00eb, serveri d\u00ebrgon nj\u00eb raport d\u00ebshtimi te adresa juaj (sepse ajo \u00ebsht\u00eb vendosur si adresa kthyese).<\/li>\n\n\n\n
  • Raportet e Suksesit (DSN Successful):<\/strong>\u00a0Si\u00e7 ndodhi n\u00eb rastin ton\u00eb, disa servera t\u00eb konfiguruar n\u00eb m\u00ebnyr\u00eb jokorrekte d\u00ebrgojn\u00eb nj\u00eb raport suksesi te adresa juaj kur emaili dor\u00ebzohet.<\/li>\n<\/ul>\n\n\n\n

    Kjo p\u00ebrmbyt inbox-in tuaj me mesazhe t\u00eb panum\u00ebrta, t\u00eb gjitha t\u00eb gjeneruara nga emaile q\u00eb ju nuk i keni d\u00ebrguar kurr\u00eb.<\/p>\n\n\n\n

    \n\n\n\n

    2. Zgjidhja e Menj\u00ebhershme p\u00ebr P\u00ebrdoruesit: Kontrollo P\u00ebrcjelljen<\/h3>\n\n\n\n

    N\u00eb shum\u00eb raste, v\u00ebllimi i lart\u00eb i notifikimeve kthehet n\u00eb nj\u00eb problem vet\u00ebm kur adresa juaj ka nj\u00eb rregull p\u00ebrcjelljeje (Redirect\/Forwarding)<\/strong> aktive.<\/p>\n\n\n\n

    N\u00ebse jeni duke marr\u00eb nj\u00eb “stuhi” DSN-sh, kontrolloni menj\u00ebher\u00eb:<\/p>\n\n\n\n

      \n
    • Rregullat (Rules) n\u00eb Klientin tuaj t\u00eb Emailit (Outlook, Thunderbird, etj.):<\/strong>\u00a0Sigurohuni q\u00eb nuk keni vendosur nj\u00eb rregull automatik q\u00eb i zhvendos ose i kthen disa lloje mesazhesh.<\/li>\n\n\n\n
    • P\u00ebrcjellja (Forwarding) n\u00eb Webmail\/cPanel\/Admin Panel:<\/strong>\u00a0N\u00ebse adresa juaj po p\u00ebrcillet te nj\u00eb llogari tjet\u00ebr, ky rregull mund t\u00eb krijoj\u00eb nj\u00eb unaz\u00eb pafund t\u00eb DSN-ve, duke i kthyer ato mesazhe te vetja juaj me nj\u00eb frekuenc\u00eb t\u00eb lart\u00eb.<\/li>\n<\/ul>\n\n\n\n

      Duke hequr rregullin e gabuar t\u00eb p\u00ebrcjelljes, ju thyeni zinxhirin e kthimit t\u00eb mesazheve dhe ndaloni menj\u00ebher\u00eb v\u00ebrshimin e DSN-ve.<\/strong><\/p>\n\n\n\n

      \n\n\n\n

      3. Zgjidhja e P\u00ebrhershme p\u00ebr Administrator\u00ebt: Ndaloni Gjenerimin<\/h3>\n\n\n\n

      P\u00ebr administrator\u00ebt e sistemit, zgjidhja m\u00eb e mir\u00eb \u00ebsht\u00eb t\u00eb forcohet konfigurimi i serverit p\u00ebr t\u00eb parandaluar gjenerimin e Backscatter-it n\u00eb burim.<\/p>\n\n\n\n

      A. Implementoni Verifikimin e Thirr\u00ebsit (Callout Verification)<\/h4>\n\n\n\n

      Ky \u00ebsht\u00eb hapi m\u00eb i r\u00ebnd\u00ebsish\u00ebm. Softueri juaj i emailit (p.sh., Postfix, Exim) duhet t\u00eb jet\u00eb i konfiguruar p\u00ebr t\u00eb b\u00ebr\u00eb nj\u00eb gj\u00eb:<\/p>\n\n\n\n

      \n

      Refuzoni emailet p\u00ebr adresat jo-ekzistuese gjat\u00eb<\/em> seanc\u00ebs SMTP (para pranimit t\u00eb tyre).<\/strong><\/p>\n<\/blockquote>\n\n\n\n

      Kur nj\u00eb email arrin n\u00eb serverin tuaj, ai duhet t\u00eb kryej\u00eb nj\u00eb “callout” p\u00ebr t\u00eb verifikuar n\u00ebse adresa e d\u00ebrguesit (MAIL FROM:<\/code>) \u00ebsht\u00eb nj\u00eb llogari e vlefshme. N\u00ebse adresa e d\u00ebrguesit (Return-Path) \u00ebsht\u00eb e falsifikuar, serveri duhet ta refuzoj\u00eb mesazhin menj\u00ebher\u00eb<\/strong> (Reply Code 5xx) pa e pranuar kurr\u00eb.<\/p>\n\n\n\n

        \n
      • P\u00ebrfitimi:<\/strong>\u00a0Serveri i spammer-it merr mesazhin e d\u00ebshtimit, dhe serveri juaj\u00a0nuk gjeneron kurr\u00eb nj\u00eb DSN<\/strong>\u00a0q\u00eb i d\u00ebrgohet adres\u00ebs s\u00eb falsifikuar.<\/li>\n<\/ul>\n\n\n\n

        B. P\u00ebrdorni DMARC me Politik\u00eb Rigoroze<\/h4>\n\n\n\n

        P\u00ebr t\u00eb v\u00ebshtir\u00ebsuar p\u00ebrdorimin e domain-it tuaj nga sulmuesit, zbatoni standardet e autentifikimit:<\/p>\n\n\n\n

          \n
        • SPF (Sender Policy Framework):<\/strong>\u00a0Deklaroni IP-t\u00eb e autorizuara.<\/li>\n\n\n\n
        • DKIM (DomainKeys Identified Mail):<\/strong>\u00a0N\u00ebnshkruani mesazhet tuaja.<\/li>\n\n\n\n
        • DMARC:<\/strong>\u00a0Vendosni nj\u00eb politik\u00eb n\u00eb\u00a0p=reject<\/code><\/strong>. Kjo u k\u00ebrkon serverave t\u00eb tjer\u00eb prit\u00ebs q\u00eb t\u00eb refuzojn\u00eb post\u00ebn q\u00eb nuk kalon kontrollet e SPF dhe DKIM. Kjo zvog\u00eblon gjasat q\u00eb emaili i falsifikuar t\u00eb pranohet dhe t\u00eb gjeneroj\u00eb ndonj\u00eb DSN.<\/li>\n<\/ul>\n\n\n\n
          \n\n\n\n

          P\u00ebrmbledhje<\/h3>\n\n\n\n

          N\u00ebse llogaria juaj \u00ebsht\u00eb kompromentuar, ndryshoni fjal\u00ebkalimin menj\u00ebher\u00eb dhe njoftoni administratorin e sistemit. Por n\u00ebse po hasni Backscatter<\/strong>, shp\u00ebtimi i inbox-it tuaj q\u00ebndron n\u00eb dy pika: hiqni redirect<\/em>-et e gabuara dhe forconi konfigurimin e serverit me Verifikimin e Thirr\u00ebsit (Callout Verification)<\/strong>.<\/p>\n\n\n\n

          Mos lejoni q\u00eb serveri juaj t\u00eb bjer\u00eb pre e k\u00ebtij mashtrimi t\u00eb zakonsh\u00ebm! P\u00ebrmir\u00ebsoni cil\u00ebsimet e serverit dhe siguria e inbox-it tuaj do t\u00eb p\u00ebrmir\u00ebsohet ndjesh\u00ebm.<\/p>\n\n\n\n

          \n\n\n\n

          Cili \u00ebsht\u00eb hapi juaj i radh\u00ebs?<\/strong> Si p\u00ebrdorues, kontrolloni rregullat tuaja t\u00eb p\u00ebrcjelljes. Si administrator, filloni me implementimin e Callout Verification<\/strong> n\u00eb serverin tuaj!<\/p>\n","protected":false},"excerpt":{"rendered":"

          N\u00eb bot\u00ebn e emailit, pak gj\u00ebra jan\u00eb m\u00eb irrituese se marrja e qindra, apo mij\u00ebra, mesazheve “Successful Mail Delivery Report” ose “Non-Delivery Report (NDR)” p\u00ebr \u00e7do minut\u00eb. N\u00ebse e keni p\u00ebrjetuar k\u00ebt\u00eb “stuhi” notifikimesh, nuk jeni vet\u00ebm! Ky fenomen shpesh quhet “Backscatter” (Shp\u00ebrndarje Kthyese) dhe tregon se serveri juaj i emailit po b\u00ebhet, pa dashje, bashk\u00ebpun\u00ebtor i […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_hsk_cluster_id":0,"_hsk_is_pillar":false,"_hsk_keyword":"","_hsk_keyword_volume":0,"_hsk_keyword_kd":0,"_hsk_quality_score":0,"_hsk_word_count":0,"_hsk_cluster_status":"draft","_hsk_internal_links":0,"_hsk_author_id":0,"_hsk_last_reviewed":"","_hsk_human_reviewed":false,"_hsk_has_citations":false,"footnotes":"","_hsk_short_name":"","_hsk_content_status":"","_hsk_written_at":"","_hsk_writer_version":"","_hsk_focus_keyword":"","_hsk_qa4_status":"","_hsk_qa4_flags":"","_hsk_writer_status":"","_hsk_article_index":0,"_hsk_featured_media_id":0,"_hsk_category_id":0},"categories":[1],"tags":[],"class_list":["post-5639","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/posts\/5639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/comments?post=5639"}],"version-history":[{"count":1,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/posts\/5639\/revisions"}],"predecessor-version":[{"id":5640,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/posts\/5639\/revisions\/5640"}],"wp:attachment":[{"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/media?parent=5639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/categories?post=5639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostinkos.com\/blog\/wp-json\/wp\/v2\/tags?post=5639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}