Unfortunately, many MTA's have started using "delayed delivery failure" as a means of thwarting address harvesting.
-----Original Message----- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2008 11:29 AM To: MS-Exchange Admin Issues Subject: Re: NDR SPAM Something to note, is that you can choose to report backscatter NDR senders to their ISP and to DNS blacklists that track these types of offenses. NDRs should only be communicated via the SMTP session in the form of an SMTP status code. They should not be sent post-reception as emails. Sender authentication (SPF, etc) use and scrutiny will surely increase over the next few years, but its going to be slow climb. Filtering for specific verbiage of certain NDRs is relatively easy to do - particularly if you have a filter that supports true regular expression syntax. On Thu, Jun 5, 2008 at 12:22 PM, Kennedy, Jim <[EMAIL PROTECTED]> wrote: > Sue them! Sorry, couldn't resist J > > > > Nothing will really work. Things you can do to help a bit. Put up an SPF > record, hopefully more people will start using them. That would stop the > servers that are sending you the NDR's from accepting the original message > in the first place....but I would argue that anyone sending NDR Spam > (backscatter) probably isn't bright enough to use SPF in the first place. > > > > Aggressive blacklist usage and block at the IP address. More and more RBL's > are listing people that send the NDR spam (backscatter). This works very > well for us. > > > > Contact the postmaster that send it to you and give them a hard time about > it. If we all did that it would clear up pretty quick...... > > > > Sorry, that is about it. No real solution to this one..... > > > > > > > > From: Theochares, George [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 05, 2008 8:46 AM > To: MS-Exchange Admin Issues > Subject: NDR SPAM > > > > Getting hit with more NDR SPAM. Most is stopped but has anyone found a > solution that really works? > > > > > > > > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
