NDRs should always have <> as an originator. If you see messages in your outbound queue /from/ an unknown address, search the SMTP logs for that address and try to determine what IP address the message originated from.
-- Chris Scharff Messaging Services Architect MessageOne [o] 512.652.4500 x244 [m] 512.560.2984 [f] 512.652.4504 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Chris H > Posted At: Tuesday, January 18, 2005 11:53 AM > Posted To: swynk > Conversation: 5.5 Outgoing SMTP queue > Subject: Re: 5.5 Outgoing SMTP queue > > > so what I am gleaming from this is: > > in the tracking log there are obviously thousands of emails > over the last day. All are to legitimate internal addresses > or bad internal addresses. When the NDR goes back from one of > these 'bad' addresses it is the email in my outgoing smtp > queue with a destination of (for > example) aol.com and an originator of either <> (null) or (most likely > bad) [EMAIL PROTECTED] . . . > > > Chris Scharff wrote: > > >Yes, those would be problems. Look at your SMTP tracking logs. > > > > > > > >>-----Original Message----- > >>From: [EMAIL PROTECTED] > >>[mailto:[EMAIL PROTECTED] On Behalf Of > >>Chris H Posted At: Tuesday, January 18, 2005 9:46 AM Posted > To: swynk > >>Conversation: 5.5 Outgoing SMTP queue > >>Subject: Re: 5.5 Outgoing SMTP queue > >> > >> > >>That I know! ;) > >> > >>I was more refering to the 100 aol.com and yahoo.com emails with > >>originator addresses I dont recognize . . . > >> > >>Kennedy, Jim wrote: > >> > >> > >> > >>>>From <> is a non-delivery report. It is sent with a null from to > >>> > >>> > >>>>prevent > >>>> > >>>> > >>>loops. So each one represents an email your server accepted for an > >>>invalid address in your domain, your server is trying to send back > >>>notification that the original to address is invalid. And > since the > >>>original was probably spam the domain your server is trying > >>> > >>> > >>to send to > >> > >> > >>>also does not exists. So they get stuck in your queue until > >>> > >>> > >>they time > >> > >> > >>>out. > >>> > >>>JK > >>> > >>> > >>> > >>> > >>> > >>>>-----Original Message----- > >>>>From: [EMAIL PROTECTED] > >>>>[mailto:[EMAIL PROTECTED] On > Behalf Of > >>>>Chris H > >>>>Sent: Tuesday, January 18, 2005 10:29 AM > >>>>To: Exchange Discussions > >>>>Subject: 5.5 Outgoing SMTP queue > >>>> > >>>>is it safe to assume that in the queue listing if it does > >>>> > >>>> > >>not have my > >> > >> > >>>>users in the ORIGINATOR column it is UCE? If it is a group email, > >>>>group reply, etc. would a different email address appear in > >>>>ORIGINATOR? I mean, in my queue, it is literally 100 to 1 > >>>> > >>>> > >>what looks > >> > >> > >>>>like legitimate email vs. an originator I havent heard of > >>>> > >>>> > >>or <>. I do > >> > >> > >>>>understand the <>. ;) > >>>> > >>>>Chris > >>>> > >>>> > >>>> > >>>> > >>>_________________________________________________________________ > >>>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > >>>Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > >>>To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > >>>To unsubscribe send a blank email to > >>> > >>> > >>[EMAIL PROTECTED] > >> > >> > >>>Exchange List admin: [EMAIL PROTECTED] > >>>To unsubscribe via postal mail, please contact us at: > >>>Jupitermedia Corp. > >>>Attn: Discussion List Management > >>>475 Park Avenue South > >>>New York, NY 10016 > >>> > >>>Please include the email address which you have been > contacted with. > >>> > >>> > >>> > >>> > >>> > >>> > >>_________________________________________________________________ > >>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > >>Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > >>To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > >>To unsubscribe send a blank email to > >>[EMAIL PROTECTED] > >>Exchange List admin: [EMAIL PROTECTED] > >>To unsubscribe via postal mail, please contact us at: > >>Jupitermedia Corp. > >>Attn: Discussion List Management > >>475 Park Avenue South > >>New York, NY 10016 > >> > >>Please include the email address which you have been contacted with. > >> > >> > >> > >> > >> > > > >_________________________________________________________________ > >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > >Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > >To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > >To unsubscribe send a blank email to > [EMAIL PROTECTED] > >Exchange List admin: [EMAIL PROTECTED] > >To unsubscribe via postal mail, please contact us at: > >Jupitermedia Corp. > >Attn: Discussion List Management > >475 Park Avenue South > >New York, NY 10016 > > > >Please include the email address which you have been contacted with. > > > > > > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
