Re: [Declude.JunkMail] Bouncing emails

[Dave Doherty]

Title: Message

At the moment, I'm using SAV corporate on the Imail spool directory only. It picks up almost everything, but once in a while something slips through, so it's not perfect. I'll be switching to Declude AV shortly.   -d   ----- Original Message ----- From: Kevin Bilbee To: Declude.JunkMail@declude.com Sent: Monday, February 27, 2006 4:55 PM Subject: RE: [Declude.JunkMail] Bouncing emails What do you use now?   Kevin Bilbee -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Dave Doherty Sent: Monday, February 27, 2006 9:45 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Bouncing emails You wouldn't. The gateway is not that smart.   We gave up on attempting to deliver misspelled emails when we were the subject of a distributed dictionary attack. No more than ten messages from any IP address, so nothing could catch it. We got half a million messages a day for months. The Symantec gateway software was useless in that situation.   Even setting the bounce period to one day still had the gateway trying to send half a million bounces.   -d ----- Original Message ----- From: Kevin Bilbee To: Declude.JunkMail@declude.com Sent: Monday, February 27, 2006 12:41 PM Subject: RE: [Declude.JunkMail] Bouncing emails In his setup Symantec would not see the message as a bounce.   Anyway how would you determine a bounce form a dictionary attack as opposed to someone who just typed the email address incorrectly.     Kevin Bilbee -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Monday, February 27, 2006 9:12 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Bouncing emails That is exactly why I stopped using Symantec as a gateway. I tried to get them to add a "don't send bounces" checkbox or at least a registry entry. but they refused, saying the Internet RFC's made NDRs mandatory.   -d ----- Original Message ----- From: Frederick Samarelli To: Declude.JunkMail@declude.com Sent: Monday, February 27, 2006 11:50 AM Subject: [Declude.JunkMail] Bouncing emails I am running a filter system listed below:   1. Front End. Symantec SMTP Gateway. (Scan Virus and a bit of spam and extensions). Removed 80% of my problems. 2. IMAIL 8.x and Declude 2.x scan and forward service. 3. Last Stop. MS Exchange   The problem is when we get a dictionary attack the exchange server sends a bounce. 550 user unknown.   The 550's works there way back through the system and now the SMTP Gateway server attempts to deliver the bounce for a day.   Anyone know a way of preventing the bounce.   Thanks.   Fred