[ExchangeList] Re: Spam Attack

  • From: Simon Butler <simon@xxxxxxxxxxx>
  • To: "'exchangelist@xxxxxxxxxxxxx'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 19 Oct 2007 01:35:25 +0100

You misunderstood what I wrote.
I did mean a COPY of the NDR. That is the setting on the SMTP virtual server of Exchange where an email address receives a copy of the NDR. The fact that the OP stated that his phone was receiving 5000 messages means that he is receiving a copy of those NDRs. Otherwise he would not have them delivered to his mailbox, they would just be in the queue.

Simon Butler
MVP: Exchange, MCSE
Amset IT Solutions Ltd.

e: simon@xxxxxxxxxxx
w: www.amset.co.uk
w: www.amset.info

Need cheap certificates for Exchange, compatible with Windows Mobile 5.0?
Go to http://www.certificatesforexchange.com/ for certificates for just $20 a year.


From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of John T (lists)
Sent: 18 October 2007 22:43
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Spam Attack

While you may view it as a waste of time, it is required by RFC. Additionally, it is not receiving a “copy” of a NDR, it is the actual NDR.


It is recommend to instead use your anti-spam software to trap and delete those specific ones.


Remember people, if the war on spam was that easy, it would be over by now.


John T


From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Simon Butler
Sent: Thursday, October 18, 2007 10:36 AM
To: 'exchangelist@xxxxxxxxxxxxx'
Subject: [ExchangeList] Re: Spam Attack


Depends what sort of attack it is.

Sounds like an NDR attack. Therefore the first thing you should do is turn off the option on the SMTP virtual server to receive a copy of NDRs. That is usually a waste of time anyway.



Other related posts: