Domain used for spam - NDR responses

[Scott Silva]

on 10/2/2007 4:06 PM Jeff Mills spake the following:
> Hi all,
> Just wondering if anyone has some magic solution for what I'm sure is a
> common problem.
> 
> A spammer generates thousands of random email addresses using your
> domain name and sends out a bazillion emails.
> All the NDR's come back to your server destined for non-existant
> mailboxes.
> 
> Now my common sense tells me that if you want to stop these you can
> block all NDR's, for example by using MCP and blocking "Delivery Status
> Notification (Failure)" "Undeliverable" etc.
> However, that will also block legitimate NDR's.
> 
> So do you all just grin and bear these or is there a magic solution I'm
> not thinking of?
> 
> Rgs,
> Jeff
Milter null is supposed to help, but I haven't used it.
But you should be dropping non-existent users at the first point of entry to 
your system, either the mail server, or the gateway if you use one. The 
connections get dropped as soon as they give a non-existent user address.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!