Re: Capturing double bounce mails in MS Exchange



Jaideep <Jaideep@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I want to know how a double bounce can be captured in MS Exchange. A double
bounce is created when a bounce bounces on its way back.

No sane MTA sends a NDR in response to a NDR, or to any other DSN.
NDR's, indeed all DSN's, are sent with the "null" address "<>".
Undeliverable NDR's should be dropped by the receiving MTA.

Typically, both the
sender and recipient addresses are invalid.

That should create a single NDR to be sent to the sender.

In Qmail and Sendmail, this task
can easily be achieved by modifying some configuration parameters.
I haved been looking for same kind of admin control parameters in the MS
Exchange, but could not find anything relevant yet. Any help would be
appreciated.

If you're asking how to collect the NDR's that can't be delivered,
Exchange 2000 dumps those into the "badmail" directory. Exchange 2003
SP1 stops that behavior. If you want to collect those undeliverable
DSN's, read this:

The Badmail folder is disabled in Exchange Server 2003 SP1 [884068]

But that begs the question why you're accepting mail you can't
deliver. Why not just refuse to accept undeliverable mail and make you
life a lot easier?

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.



Relevant Pages

  • RE: Preventing reverse NDR attacks...
    ... I understand that you want to secure the Exchange server and avoid the NDR ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange Queues (SBS2003)
    ... Exchange mailboxes are receiving NDR's for mail that they did not send. ... > In the NDR we can see the IP address of the server that originally sent the ... It is not their Exchange server, and in fact the IP address changes ... > spoofing legitimate email addresses from the customer's domain in SPAM mail. ...
    (microsoft.public.windows.server.sbs)
  • RE: Getting swamped with NDRs. How do I stop them?
    ... is using non-delivery report (NDR), ... Start the Exchange System Manager program. ... Expand Servers, expand your Exchange server, and click Queues. ... Click the Recipient Filtering tab, click to select the Filter recipients ...
    (microsoft.public.windows.server.sbs)
  • Re: How to remove a mail domain
    ... Exchange still believes it is authoritative for the domain. ... then unchecking the Exchange responsible for delivery to this domain ... The reporting MTA is important for troubleshooting your NDR. ... your e-mail message as a file and someone opens and replies to this ...
    (microsoft.public.windows.server.sbs)
  • Re: Strange emails
    ... The other common reason for this is that the emails that the NDR's are ... It's also frequently known as NDR SPAM. ... Exchange mailboxes are receiving NDR's for mail they did not send. ... In the NDR we can see the IP address of the server that originally sent the ...
    (microsoft.public.exchange.admin)