Re: Users Receiving Non-Delivery Messages for Messages They Didn't Sen



This is ndr backscatter, you can't prevent because of nature of how
SMTP works.

http://spamlinks.net/prevent-secure-backscatter.htm

James Chong (MVP)
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com



On Mar 8, 3:03 pm, Scott <S...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
How can I prevent our end users from receiving non-delivery receipts for
messages they didn't send--or is this just the next wave of SPAM technique?
It didn't get caught by our Sunbelt Ninja filters. Here is a representative
message (the 192.168.1.2 address is our web server in the DMZ):



-----Original Message-----
From: Mail Delivery Subsystem

[mailto:MAILER-DAE...@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, March 08, 2007 11:08 AM
To: Wilson, Thomas
Subject: Returned mail: see transcript for details

The original message was received at Thu, 8 Mar 2007 08:08:24 -0800 from
hobbiless.hesitancy.volia.net [77.122.91.116]

----- The following addresses had permanent fatal errors -----
<wil...@xxxxxxxxxxxxxx>
(reason: 550 5.1.1 <wil...@xxxxxxxxxxxxxx>... User unknown)

----- Transcript of session follows ----- ... while talking to
[192.168.1.2]:
DATA
<<< 550 5.1.1 <wil...@xxxxxxxxxxxxxx>... User unknown 550 5.1.1
<wil...@xxxxxxxxxxxxxx>... User unknown <<< 503 5.0.0 Need RCPT (recipient)

Scott- Hide quoted text -

- Show quoted text -


.



Relevant Pages

  • Re: Workstation Authentication
    ... Svyatoslav Pidgorny, MS MVP - Security, MCSE ... "ChuckN" wrote in message ...
    (microsoft.public.windows.server.security)
  • Re: Mailbox Size Reported Incorrectly
    ... James Chong (MVP) ... MCSE | M+, S+, MCTS, Security+ ...
    (microsoft.public.exchange.admin)
  • Re: Message filtering
    ... James Chong (MVP) ... MCSE | M+, S+, MCTS, Security+ ...
    (microsoft.public.exchange.admin)
  • Re: Alternative MX record
    ... James Chong (MVP) ... MCSE | M+, S+, MCTS, Security+ ...
    (microsoft.public.exchange.admin)
  • Re: Send As
    ... James Chong (MVP) ... MCSE | M+, S+, MCTS, Security+ ...
    (microsoft.public.exchange.admin)

Loading