Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Exchange
2000.active.directory
2000.admin
2000.announcements
2000.app.conversion
2000.applications
2000.clients
2000.clustering
2000.connectivity
2000.development
2000.documentation
2000.general
2000.information.store
2000.interop
2000.kms
2000.misc
2000.protocols
2000.realtime.collabo.
2000.setup
2000.transport
2000.win2000
admin
application.conversion
applications
clients
clustering
connectivity
design
development
misc
mobility
setup
tools
  
 
date: Tue, 13 May 2008 09:05:01 -0700,    group: microsoft.public.exchange.admin        back       


system administrator Undeliverable messages    
Our email addresses are being spoofed outside our domain. we are recieving a 
large amount of Undeliverable: 5.7.1 messages, that fill up each affected 
user's inbox.
Can I route these messages so they dont show up in a users inbox, but 
instead go to some other email account ?
will adding spf record help with this ??
what else can i do to prevent this from happening.
date: Tue, 13 May 2008 09:05:01 -0700   author:   John Pennington

Re: system administrator Undeliverable messages    
John Pennington  wrote:
> Our email addresses are being spoofed outside our domain. we are
> recieving a large amount of Undeliverable: 5.7.1 messages, that fill
> up each affected user's inbox.

This happens to everyone & there seems to be a huge increase lately....


> Can I route these messages so they dont show up in a users inbox, but
> instead go to some other email account ?

No, not unless you have some way of stripping out NDRs via some third part 
software or something before they hit Exchange.

> will adding spf record help with this ??

Possibly yes - but read the post/thread started by Mark ("Using SPF to 
reduce sysadmin messages" right below yours....

> what else can i do to prevent this from happening.

Stop using email? :-)
date: Tue, 13 May 2008 12:19:11 -0400   author:   Lanwench [MVP - Exchange]

Re: system administrator Undeliverable messages    
"John Pennington"  wrote in message 
news:D8089D9F-4864-4B8A-9D4B-5E0DBC6FE2D8@microsoft.com...
> Our email addresses are being spoofed outside our domain. we are recieving 
> a
> large amount of Undeliverable: 5.7.1 messages, that fill up each affected
> user's inbox.
> Can I route these messages so they dont show up in a users inbox, but
> instead go to some other email account ?
> will adding spf record help with this ??
> what else can i do to prevent this from happening.

Backscatter has been friggin' brutal ever since the Easter weekend.  A 
MASSIVE increase.  Our anti-SPAM vendor (GFI) has released an update for 
their software that allows it to scan NDRs, and we've had some success with 
it, but a lot of the stuff is still getting through.  Truly a pain.

Lanwench jokes about stopping using email, but I sometimes wonder if that 
wouldn't be a good thing.  It's amazing how reliant we've become on a system 
that is so fundamentally broken...
date: Tue, 13 May 2008 12:48:47 -0400   author:   Phil McNeill

Re: system administrator Undeliverable messages    
I've noticed most coming from russia, easten europe,
I'm wondering if I can update the  'deny sender' list on the connectio 
filtering tab of message filtering ??
we use gfi mail essentials. I wonder if the update applies to that software 
as well ??

"Phil McNeill" wrote:

> 
> "John Pennington"  wrote in message 
> news:D8089D9F-4864-4B8A-9D4B-5E0DBC6FE2D8@microsoft.com...
> > Our email addresses are being spoofed outside our domain. we are recieving 
> > a
> > large amount of Undeliverable: 5.7.1 messages, that fill up each affected
> > user's inbox.
> > Can I route these messages so they dont show up in a users inbox, but
> > instead go to some other email account ?
> > will adding spf record help with this ??
> > what else can i do to prevent this from happening.
> 
> Backscatter has been friggin' brutal ever since the Easter weekend.  A 
> MASSIVE increase.  Our anti-SPAM vendor (GFI) has released an update for 
> their software that allows it to scan NDRs, and we've had some success with 
> it, but a lot of the stuff is still getting through.  Truly a pain.
> 
> Lanwench jokes about stopping using email, but I sometimes wonder if that 
> wouldn't be a good thing.  It's amazing how reliant we've become on a system 
> that is so fundamentally broken... 
> 
> 
>
date: Tue, 13 May 2008 10:43:07 -0700   author:   John Pennington

Re: system administrator Undeliverable messages    
The update I was referring to was for GFI MailEssentials 12, which is what 
we use.  We implemented it this past weekend and it's helping with, although 
not eliminating, the problem.  You can download it from their website.


"John Pennington"  wrote in message 
news:5213F62A-7618-4A0A-86A0-BC08E4B464B9@microsoft.com...
> I've noticed most coming from russia, easten europe,
> I'm wondering if I can update the  'deny sender' list on the connectio
> filtering tab of message filtering ??
> we use gfi mail essentials. I wonder if the update applies to that 
> software
> as well ??
>
> "Phil McNeill" wrote:
>
>>
>> "John Pennington"  wrote in message
>> news:D8089D9F-4864-4B8A-9D4B-5E0DBC6FE2D8@microsoft.com...
>> > Our email addresses are being spoofed outside our domain. we are 
>> > recieving
>> > a
>> > large amount of Undeliverable: 5.7.1 messages, that fill up each 
>> > affected
>> > user's inbox.
>> > Can I route these messages so they dont show up in a users inbox, but
>> > instead go to some other email account ?
>> > will adding spf record help with this ??
>> > what else can i do to prevent this from happening.
>>
>> Backscatter has been friggin' brutal ever since the Easter weekend.  A
>> MASSIVE increase.  Our anti-SPAM vendor (GFI) has released an update for
>> their software that allows it to scan NDRs, and we've had some success 
>> with
>> it, but a lot of the stuff is still getting through.  Truly a pain.
>>
>> Lanwench jokes about stopping using email, but I sometimes wonder if that
>> wouldn't be a good thing.  It's amazing how reliant we've become on a 
>> system
>> that is so fundamentally broken...
>>
>>
>>
date: Tue, 13 May 2008 14:30:10 -0400   author:   Phil McNeill

Re: system administrator Undeliverable messages    
"Lanwench [MVP - Exchange]"
 wrote:

>John Pennington  wrote:
>> Our email addresses are being spoofed outside our domain. we are
>> recieving a large amount of Undeliverable: 5.7.1 messages, that fill
>> up each affected user's inbox.
>
>This happens to everyone & there seems to be a huge increase lately....

http://www.eweek.com/c/a/Security/Backscatter-Spam-is-Back/

>> Can I route these messages so they dont show up in a users inbox, but
>> instead go to some other email account ?
>
>No, not unless you have some way of stripping out NDRs via some third part 
>software or something before they hit Exchange.
>
>> will adding spf record help with this ??
>
>Possibly yes - but read the post/thread started by Mark ("Using SPF to 
>reduce sysadmin messages" right below yours....
>
>> what else can i do to prevent this from happening.
>
>Stop using email? :-)

Not yet a RFC, but this is promising.
http://ietfreport.isoc.org/idref/draft-levine-smtp-batv/

It doesn't work well with systems that use call-back or call-out
validation, though.

-- 
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
date: Tue, 13 May 2008 22:09:49 -0400   author:   Rich Matheisen [MVP]

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us