Do you have it set up so that Antigen is sending a notification to the
sender?  Turn that option off for a little while.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-K.Borndale
Network Administrator
Sybari Software
631.630.8569 -direct dial
631.439.0689 -fax
http://www.sybari.com
"One man's ceiling is another man's floor"


|--------+----------------------------------->
|        |          [EMAIL PROTECTED]|
|        |          rg                       |
|        |          Sent by:                 |
|        |          bounce-exchange-148870@ls|
|        |          .swynk.com               |
|        |                                   |
|        |                                   |
|        |          12/10/2001 11:04 AM      |
|        |          Please respond to        |
|        |          "Exchange Discussions"   |
|        |                                   |
|--------+----------------------------------->
  
>---------------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                    
                                                   |
  |       To:     "Exchange Discussions" <[EMAIL PROTECTED]>                       
                                                   |
  |       cc:                                                                          
                                                   |
  |       Subject:     RE: Mail Loop? 638 messages from Antigen (so far).              
                                                   |
  
>---------------------------------------------------------------------------------------------------------------------------------------|




It's almost the equivalent of a DOS attack because the sender:
[EMAIL PROTECTED]

Keeps sending this message:
DELIVERY FAILURE:  User Postmaster ([EMAIL PROTECTED])

TO:
[EMAIL PROTECTED]
--------------------------------

I"M NOT SENDING anything to this!!!!!!!!!!!!! Unless there is some type of
loop in antigen or a loop at their end.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 10, 2001 9:56 AM
To: Exchange Discussions
Subject: RE: Mail Loop? 638 messages from Antigen (so far).


I'm logging full on SMTP interface events.

-----Original Message-----
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 10, 2001 9:43 AM
To: Exchange Discussions
Subject: RE: Mail Loop? 638 messages from Antigen (so far).


Turn up logging on your IMS? Can you disable notification to the sender of
filtering at least temporarily?

Chris
--
Chris Scharff
Senior Sales Engineer
MessageOne
If you can't measure, you can't manage!


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 10, 2001 9:40 AM
> To: Exchange Discussions
> Subject: RE: Mail Loop? 638 messages from Antigen (so far).
>
>
> I filter all files.  I have to because my users rename their
> *.exe files and other stuff (change the extension) to "try"
> and bypass my firewall.
>
> (Admin Box)
> All reports go to a Postmaster Distribution List of which I'm
> a memember. Here's the deal.  I have been filtering text
> file's for some time.  This just started this morning and
> I've already received over 600 messages. Since I sent my
> first email I have received an additional 56 messages.
>
> -----Original Message-----
> From: Chris Scharff [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 10, 2001 9:18 AM
> To: Exchange Discussions
> Subject: RE: Mail Loop? 638 messages from Antigen (so far).
>
>
> You filter text files?
>
> Chris
> --
> Chris Scharff
> Senior Sales Engineer
> MessageOne
> If you can't measure, you can't manage!
>
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, December 10, 2001 8:55 AM
> > To: Exchange Discussions
> > Subject: Mail Loop? 638 messages from Antigen (so far).
> >
> >
> > I am expereincing some time of mail loop and not sure how to
> > get rid of it.
> >
> > I have 638 messages (so far) from Antigen like this:
> >
> > Antigen found ATT04643.TXT matching =*.txt file filter.
> > The file is currently Removed.  The message, "DELIVERY
> > FAILURE: User Postmaster ([EMAIL PROTECTED]) not listed
> > in public Name & Address Book", was sent from
> > [EMAIL PROTECTED] and was discovered in "Antigen
> > Profile"\Inbox located at "/My Exchange Server".
> >
> > I'm getting about 1 every 10 seconds?
> >
> > Thanks.
> > BEM
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> >
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
>

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]





_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to