|
Home > Archive > IIS and SMTP > December 2004 > How to stop SMTP sevice from replying to badmail?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
How to stop SMTP sevice from replying to badmail?
|
|
| The Pistoleer 2004-12-03, 6:10 pm |
| I'm receiving thousands of emails every hour sent to some random
non-existing email address in my domain. The return addresses all seem to
be different, likely spoofed. The content is always spam.
It appears that my SMTP service (Server 2003 Standard, IIS) is sending a
non-delivery reply to all these messages. How can I stop these replies, I'd
rather these emails to non-existing names be just dropped.
Pete
http://www.Pistoleer.com Retail & Wholesale (PH/FX 618-288-4588)
________________________________________
_________________________
A-Zoom snap-caps, Bore-Stores cases, Kleen-Bore gun care products
Official Targets, Pachmayr grips/pads, Trius traps, Target Stands
Leatherman, Lyman Reloading, HKS speedloaders, FREE classifieds
| |
| Johan Karl Larsen 2004-12-03, 8:55 pm |
| I don't think deleting the received bogus mail is the right way to go.
Probably better of getting a spamfilter. This will most likely stop the
bogus mail from _entering_ your system. Get a free filter from:
http://martijnjongen.com/Default.aspx?tabid=27
Do you have a sample header from such a mail?
--
Johan
"The Pistoleer" <pistoleer@pistoleer.com> wrote in message
news:elhLQzV2EHA.3336@TK2MSFTNGP11.phx.gbl...
> I'm receiving thousands of emails every hour sent to some random
> non-existing email address in my domain. The return addresses all seem to
> be different, likely spoofed. The content is always spam.
>
> It appears that my SMTP service (Server 2003 Standard, IIS) is sending a
> non-delivery reply to all these messages. How can I stop these replies,
> I'd rather these emails to non-existing names be just dropped.
>
> Pete
> http://www.Pistoleer.com Retail & Wholesale (PH/FX 618-288-4588)
> ________________________________________
_________________________
> A-Zoom snap-caps, Bore-Stores cases, Kleen-Bore gun care products
> Official Targets, Pachmayr grips/pads, Trius traps, Target Stands
> Leatherman, Lyman Reloading, HKS speedloaders, FREE classifieds
>
>
>
| |
| m.marien 2004-12-04, 6:03 pm |
|
"Johan Karl Larsen" <spamtrap11@itlarsen.net> wrote in message
news:Oi0G2Ka2EHA.3236@TK2MSFTNGP15.phx.gbl...
>I don't think deleting the received bogus mail is the right way to go.
>Probably better of getting a spamfilter. This will most likely stop the
>bogus mail from _entering_ your system. Get a free filter from:
> http://martijnjongen.com/Default.aspx?tabid=27
>
I tend to agree with Pete. There should be a way to silently drop any
messages not intended for a local recipients. While the spamfilter may be
one solution, IMHO it's solving the wrong problem. The concern is not SPAM,
but sending NDR's when there is no obligation (or reason) for them.
In addition, spamfilters are not 100% reliable. There is the possibility of
stopping valid messages from reaching recipients with poor rules.
Silently dropping all messages not intended for local recipients saves the
hassle of trying to figure if it's SPAM and trying to send a NDR. Simple
problem - simple solution. A lot of other mail servers have this feature.
For a home grown solution, look at CDO and the OnArrival event. Whatever is
generating the NDR's will pass them on to the SMTP server for delivery. They
can be trapped by an OnArrival event sink and deleted before they are
delivered.
> Do you have a sample header from such a mail?
>
> --
> Johan
>
> "The Pistoleer" <pistoleer@pistoleer.com> wrote in message
> news:elhLQzV2EHA.3336@TK2MSFTNGP11.phx.gbl...
>
>
| |
| Craig Bricco 2004-12-06, 5:51 pm |
| I tried to get an answer to this problem a month ago and none was
forthcoming. Luckily my support agreement with GFI entitled me to a free
upgrade to Mail Essentials 10.1 which they added a filter for non existent
email addresses on your domain.
I swear by this program and it stops about 85% of all incoming SPAM. If it
happens to catch a few good emails, you can direct all filtered mail to be
sent to a mail box for review, rather than just delete. No, not the answer
to the problem, but one has to do something other than just delete all the
crap from your inbox and tend to the bad mail folder.
Craig
"The Pistoleer" <pistoleer@pistoleer.com> wrote in message
news:elhLQzV2EHA.3336@TK2MSFTNGP11.phx.gbl...
> I'm receiving thousands of emails every hour sent to some random
> non-existing email address in my domain. The return addresses all seem to
> be different, likely spoofed. The content is always spam.
>
> It appears that my SMTP service (Server 2003 Standard, IIS) is sending a
> non-delivery reply to all these messages. How can I stop these replies,
> I'd rather these emails to non-existing names be just dropped.
>
> Pete
> http://www.Pistoleer.com Retail & Wholesale (PH/FX 618-288-4588)
> ________________________________________
_________________________
> A-Zoom snap-caps, Bore-Stores cases, Kleen-Bore gun care products
> Official Targets, Pachmayr grips/pads, Trius traps, Target Stands
> Leatherman, Lyman Reloading, HKS speedloaders, FREE classifieds
>
>
>
| |
| Peter D. Hipson 2004-12-08, 5:53 pm |
| What you are looking for is a catchall account. Do an internet search
and you should find something that will do the trick for you. With a
catchall, any email that does not have a mail-box will be dropped in
the catchall without further action.
On Sat, 4 Dec 2004 16:51:06 -0600, "m.marien" <mm AT RiverCityCanada
DOT com> wrote:
>
>"Johan Karl Larsen" <spamtrap11@itlarsen.net> wrote in message
>news:Oi0G2Ka2EHA.3236@TK2MSFTNGP15.phx.gbl...
>
>I tend to agree with Pete. There should be a way to silently drop any
>messages not intended for a local recipients. While the spamfilter may be
>one solution, IMHO it's solving the wrong problem. The concern is not SPAM,
>but sending NDR's when there is no obligation (or reason) for them.
>
>In addition, spamfilters are not 100% reliable. There is the possibility of
>stopping valid messages from reaching recipients with poor rules.
>
>Silently dropping all messages not intended for local recipients saves the
>hassle of trying to figure if it's SPAM and trying to send a NDR. Simple
>problem - simple solution. A lot of other mail servers have this feature.
>
>For a home grown solution, look at CDO and the OnArrival event. Whatever is
>generating the NDR's will pass them on to the SMTP server for delivery. They
>can be trapped by an OnArrival event sink and deleted before they are
>delivered.
>
>
PeterD, the Darkstar Network
To email, fix my address!
ExpertZone!
| |
| m.marien 2004-12-11, 6:36 pm |
|
"The Pistoleer" <pistoleer@pistoleer.com> wrote in message
news:elhLQzV2EHA.3336@TK2MSFTNGP11.phx.gbl...
> I'm receiving thousands of emails every hour sent to some random
> non-existing email address in my domain. The return addresses all seem to
> be different, likely spoofed. The content is always spam.
>
> It appears that my SMTP service (Server 2003 Standard, IIS) is sending a
> non-delivery reply to all these messages. How can I stop these replies,
> I'd rather these emails to non-existing names be just dropped.
>
> Pete
Here is a script that will catch all the NDR's and silently drop them. It
only deletes the NDR's coming from your domain. Be sure to change the one
line wth the your.domain.name.here. You can delete the code that writes the
log file. It only helps to make sure it's working properly.
<SCRIPT LANGUAGE="VBScript">
Const cdoRunNextSink = 0
Const cdoSkipRemainingSinks = 1
Const cdoStatAbortDelivery = 2
Const cdoStatBadMail = 3
Sub IEventIsCacheable_IsCacheable()
' just returns S_OK
End Sub
Sub ISMTPOnArrival_OnArrival(ByVal Msg, EventStatus)
If Msg.Subject = "Delivery Status Notification (Failure)" and InStr
(Msg.From, "postmaster@your.domain.name.here") Then
Dim Flds
Set Flds = Msg.EnvelopeFields
Flds("http://schemas.microsoft.com/cdo/smtpenvelope/messagestatus") =
cdoStatAbortDelivery
Flds.Update
EventStatus = cdoSkipRemainingSinks
' write a log file --------------------------------------------
Dim fs
Set fs = CreateObject("Scripting.FileSystemObject")
Dim file
Set file = fs.OpenTextFile("C:\InetPub\ndr.log", 8, True )
file.Write "NDR deleted: " & Msg.To & vbCrLf
file.Close
' end of write a log file -------------------------------------
Else
EventStatus = cdoRunNextSink
End If
End Sub
</SCRIPT>
You can register the sink using the instructions here:
http://msdn.microsoft.com/library/d...ng_vbscript.asp
You need the "smtpreg.vbs" code from MS.
|
|
|
|
|