Re: [Declude.JunkMail] Bouncing emails

Mon, 27 Feb 2006 09:51:08 -0800

Title: Message
You wouldn't. The gateway is not that smart.
 
We gave up on attempting to deliver misspelled emails when we were the subject of a distributed dictionary attack. No more than ten messages from any IP address, so nothing could catch it. We got half a million messages a day for months. The Symantec gateway software was useless in that situation.
 
Even setting the bounce period to one day still had the gateway trying to send half a million bounces.
 
-d
----- Original Message -----
Sent: Monday, February 27, 2006 12:41 PM
Subject: RE: [Declude.JunkMail] Bouncing emails

In his setup Symantec would not see the message as a bounce.
 
Anyway how would you determine a bounce form a dictionary attack as opposed to someone who just typed the email address incorrectly.
 
 
Kevin Bilbee
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Monday, February 27, 2006 9:12 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Bouncing emails

That is exactly why I stopped using Symantec as a gateway. I tried to get them to add a "don't send bounces" checkbox or at least a registry entry. but they refused, saying the Internet RFC's made NDRs mandatory.
 
-d
----- Original Message -----
Sent: Monday, February 27, 2006 11:50 AM
Subject: [Declude.JunkMail] Bouncing emails

I am running a filter system listed below:
 
1. Front End. Symantec SMTP Gateway. (Scan Virus and a bit of spam and extensions). Removed 80% of my problems.
2. IMAIL 8.x and Declude 2.x scan and forward service.
3. Last Stop. MS Exchange
 
The problem is when we get a dictionary attack the exchange server sends a bounce. 550 user unknown.
 
The 550's works there way back through the system and now the SMTP Gateway server attempts to deliver the bounce for a day.
 
Anyone know a way of preventing the bounce.
 
Thanks.
 
Fred
 

Reply via email to