You misunderstood what I wrote.
I did mean a COPY of the NDR. That is the setting on the SMTP virtual server of Exchange where an email address receives a copy of the NDR. The fact that the OP stated that his phone was receiving 5000 messages means that he is receiving a copy of those NDRs. Otherwise he would not have them delivered to his mailbox, they would just be in the queue.
From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of John T (lists)
Sent: 18 October 2007 22:43
Subject: [ExchangeList] Re: Spam Attack
While you may view it as a waste of time, it is required by RFC. Additionally, it is not receiving a “copy” of a NDR, it is the actual NDR.
It is recommend to instead use your anti-spam software to trap and delete those specific ones.
Remember people, if the war on spam was that easy, it would be over by now.
On Behalf Of Simon Butler
Depends what sort of attack it is.
Sounds like an NDR attack. Therefore the first thing you should do is turn off the option on the SMTP virtual server to receive a copy of NDRs. That is usually a waste of time anyway.