>One of my customers is getting hundred of bounce back messages an hour.
>Apparently sombody is forging their domain for the reply "uccmadison.org" is

a joe-job.  is the [EMAIL PROTECTED] a account or forged?

If forged, then your MX should reject the bounces. end of joe-job.

>there any way I can block the bounce back messages he's getting.

If not forged ([EMAIL PROTECTED] is a real account), then you could, 
for the duration of the joe-job, have IMGate reject all MAIL FROM:<> but 
only for the victim domain.   You would might lose some legit bounces, no 
big deal compared to the benefit of killing the joe-job.

Len


Reply via email to