Sorry, didn't see the last part that says some of them are valid 'to' addresses.
Agressivley checking during SMTP will clobber many of those. The correct RBL's, circular DNS checking and you will eliminate most of those. Those few that make it through should be tagged and delivered or Quaranteened for release. You shouldn't solve your spam problem by abusing the forged from address. Not a perfect solution but I think it is the lesser of the evils. What if the CEO of your best customer is the forged from and you clobber him with a 1000 NDR's? Not that far fetched considering the number of Virus's that attack Outlook address books and use one of the for the forged from. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:bounce- > [EMAIL PROTECTED] On Behalf Of Kennedy, Jim > Sent: Wednesday, December 19, 2007 4:27 PM > To: Exchange Discussions > Subject: RE: Email philosophy 101 - Spam NDRs > > > 3) You should get a spam solution that will do realtime recipient > checking and 554 them during SMTP. > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:bounce- > > [EMAIL PROTECTED] On Behalf Of East, Bill > > Sent: Wednesday, December 19, 2007 4:03 PM > > To: Exchange Discussions > > Subject: Email philosophy 101 - Spam NDRs > > > > Let's say we get 1000 messages with invalid addresses into our spam > > filter. > > 950 of them will get caught as spam if we filter them. > > 49 slip past the filter but shouldn't have. They're directory > > harvesting > > messages, invalid return addresses, and valid return addresses of > > people > > who didn't send the spam. > > 1 is a message from one of our customers asking for directions, that > he > > fat-fingered to MemmerService > > > > Should we send NDRs on the 49 spammy ones so that the customer gets > his > > NDR? Or should we silently drop his message so that we're not sending > > 49 > > NDRs that we shouldn't? > > > > Please use a #2 pencil. > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to leave-28404306- > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to leave-28405330- > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
