Re: IMC originator

2002-01-10 Thread Daniel Chenault

There's no real way for it to tell that the message if failing because it
was deliberately forged.

- Original Message -
From: Alverson, Thomas M. [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 5:03 PM
Subject: RE: IMC originator 


 Is there any way to have exchange 5.5 treat those NDR messages to bad
 spammer email addresses differently than real emails?  I delete them when
I
 see them in the queue, but It would be nice if you could make exchange
give
 up real easily (quickly) when trying to send an NDR to a bad address.

 Tom

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 3:11 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 The RFC isn't real clear on this. We've gone round on this before and it
 seems that server can optionally deny the message up-front or accept it
and
 than NDR it back to the sender. Exchange does the latter.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 1:55 PM
 Subject: RE: IMC originator 


  Ok, but they should not be sending ndr's in response to notification
  messages is my point. If relaying disabled, messages that are
  'spoofed' should not generate an NDR in my opinion. I mean, why should
  it send and fail send and fail to hosts that don't exist just to say,
  'invalid host'
 or
  relaying prohibited or am I missing something?
 
 
 
  -Original Message-
  From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, January 09, 2002 2:41 PM
  To: Exchange Discussions
  Subject: RE: IMC originator 
 
 
  They will still appear for standard, valid NDR's as well.
 
  William
 
  -Original Message-
  From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, January 09, 2002 11:42 AM
  To: Exchange Discussions
  Subject: RE: IMC originator 
 
 
  So I should ignore those if they are not causing any other problem? I
  have followed all the suggested reccomendations regarding relaying.
 
  Rich
 
  -Original Message-
  From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, January 09, 2002 1:41 PM
  To: Exchange Discussions
  Subject: Re: IMC originator 
 
 
  That is your server NDRing the attempted relays back to the spammers.
 Since
  spammers tend to use bogus addresses those messages will likely
  timeout after three days as undeliverable.
 
  - Original Message -
  From: Siegel, Richard [EMAIL PROTECTED]
  To: Exchange Discussions [EMAIL PROTECTED]
  Sent: Wednesday, January 09, 2002 12:18 PM
  Subject: IMC originator 
 
 
   I believe I have closed my mail server: smtp.actv.com from relaying,
  however
   whenever I go into the IMS queues, I am still seeing messages with
   originator  with destination another host.  What is up with this,
   am I missing something?
  
   Rich
  


 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Lefkovics, William

Yes.  Yes, you are missing something.

Section 3.39:
http://www.swinc.com/resource/exch_faq_sec3.htm
and RFC2822

William Lefkovics, MCSE, A+


-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 10:19 AM
To: Exchange Discussions
Subject: IMC originator 


I believe I have closed my mail server: smtp.actv.com from relaying, however
whenever I go into the IMS queues, I am still seeing messages with
originator  with destination another host.  What is up with this, am I
missing something?

Rich

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Andy David

I thought those were emails from the good hands people?


-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:19 PM
To: Exchange Discussions
Subject: RE: IMC originator 


Yes.  Yes, you are missing something.

Section 3.39:
http://www.swinc.com/resource/exch_faq_sec3.htm
and RFC2822

William Lefkovics, MCSE, A+


-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 10:19 AM
To: Exchange Discussions
Subject: IMC originator 


I believe I have closed my mail server: smtp.actv.com from relaying, however
whenever I go into the IMS queues, I am still seeing messages with
originator  with destination another host.  What is up with this, am I
missing something?

Rich

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

--
The information contained in this email message is privileged and confidential 
information intended only for the use of the individual or entity to whom it is 
addressed.  If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copy of this message is 
strictly prohibited.  If you have received this email in error, please immediately 
notify Veronis, Suhler  Associates, Inc. by telephone (212)935-4990, fax 
(212)381-8168, or email ([EMAIL PROTECTED]) and delete the message.  Thank 
you.

==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



Re: IMC originator

2002-01-09 Thread Daniel Chenault

That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Siegel, Richard

So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Andy David

friggin delete them...


-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 2:42 PM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

--
The information contained in this email message is privileged and confidential 
information intended only for the use of the individual or entity to whom it is 
addressed.  If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copy of this message is 
strictly prohibited.  If you have received this email in error, please immediately 
notify Veronis, Suhler  Associates, Inc. by telephone (212)935-4990, fax 
(212)381-8168, or email ([EMAIL PROTECTED]) and delete the message.  Thank 
you.

==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Lefkovics, William

They will still appear for standard, valid NDR's as well.

William 

-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:42 AM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Andy David

If they are stuck, I whack those as well!


-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 2:41 PM
To: Exchange Discussions
Subject: RE: IMC originator 


They will still appear for standard, valid NDR's as well.

William 

-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:42 AM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

--
The information contained in this email message is privileged and confidential 
information intended only for the use of the individual or entity to whom it is 
addressed.  If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copy of this message is 
strictly prohibited.  If you have received this email in error, please immediately 
notify Veronis, Suhler  Associates, Inc. by telephone (212)935-4990, fax 
(212)381-8168, or email ([EMAIL PROTECTED]) and delete the message.  Thank 
you.

==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Siegel, Richard

Ok, but they should not be sending ndr's in response to notification
messages is my point. If relaying disabled, messages that are 'spoofed'
should not generate an NDR in my opinion. I mean, why should it send and
fail send and fail to hosts that don't exist just to say, 'invalid host' or
relaying prohibited or am I missing something?



-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 2:41 PM
To: Exchange Discussions
Subject: RE: IMC originator 


They will still appear for standard, valid NDR's as well.

William 

-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:42 AM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Lefkovics, William

Then Andy David's practice applies.  :o)

Delete.

William 


-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:55 AM
To: Exchange Discussions
Subject: RE: IMC originator 


Ok, but they should not be sending ndr's in response to notification
messages is my point. If relaying disabled, messages that are 'spoofed'
should not generate an NDR in my opinion. I mean, why should it send and
fail send and fail to hosts that don't exist just to say, 'invalid host' or
relaying prohibited or am I missing something?



-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 2:41 PM
To: Exchange Discussions
Subject: RE: IMC originator 


They will still appear for standard, valid NDR's as well.

William 

-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:42 AM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Benjamin Winzenz

Depends on how the address is input.  If the address is encapsulated, I have
seen where it will be accepted, as if it will relay, but then it generates
an NDR.

Ben Winzenz, MCSE
Network/Systems Administrator
Peregrine Systems


-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 09, 2002 2:55 PM
To: Exchange Discussions
Subject: RE: IMC originator 

Ok, but they should not be sending ndr's in response to notification
messages is my point. If relaying disabled, messages that are 'spoofed'
should not generate an NDR in my opinion. I mean, why should it send and
fail send and fail to hosts that don't exist just to say, 'invalid host' or
relaying prohibited or am I missing something?



-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 2:41 PM
To: Exchange Discussions
Subject: RE: IMC originator 


They will still appear for standard, valid NDR's as well.

William 

-Original Message-
From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 11:42 AM
To: Exchange Discussions
Subject: RE: IMC originator 


So I should ignore those if they are not causing any other problem?
I have followed all the suggested reccomendations regarding relaying.

Rich

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 09, 2002 1:41 PM
To: Exchange Discussions
Subject: Re: IMC originator 


That is your server NDRing the attempted relays back to the spammers. Since
spammers tend to use bogus addresses those messages will likely timeout
after three days as undeliverable.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 12:18 PM
Subject: IMC originator 


 I believe I have closed my mail server: smtp.actv.com from relaying,
however
 whenever I go into the IMS queues, I am still seeing messages with
 originator  with destination another host.  What is up with this, am I
 missing something?

 Rich


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



Re: IMC originator

2002-01-09 Thread Daniel Chenault

Yep
- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 1:41 PM
Subject: RE: IMC originator 


 So I should ignore those if they are not causing any other problem?
 I have followed all the suggested reccomendations regarding relaying.

 Rich

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 1:41 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 That is your server NDRing the attempted relays back to the spammers.
Since
 spammers tend to use bogus addresses those messages will likely timeout
 after three days as undeliverable.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 12:18 PM
 Subject: IMC originator 


  I believe I have closed my mail server: smtp.actv.com from relaying,
 however
  whenever I go into the IMS queues, I am still seeing messages with
  originator  with destination another host.  What is up with this, am I
  missing something?
 
  Rich
 
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Archives:   http://www.swynk.com/sitesearch/search.asp
  To unsubscribe: mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



Re: IMC originator

2002-01-09 Thread Daniel Chenault

The RFC isn't real clear on this. We've gone round on this before and it
seems that server can optionally deny the message up-front or accept it and
than NDR it back to the sender. Exchange does the latter.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 1:55 PM
Subject: RE: IMC originator 


 Ok, but they should not be sending ndr's in response to notification
 messages is my point. If relaying disabled, messages that are 'spoofed'
 should not generate an NDR in my opinion. I mean, why should it send and
 fail send and fail to hosts that don't exist just to say, 'invalid host'
or
 relaying prohibited or am I missing something?



 -Original Message-
 From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 2:41 PM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 They will still appear for standard, valid NDR's as well.

 William

 -Original Message-
 From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 11:42 AM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 So I should ignore those if they are not causing any other problem?
 I have followed all the suggested reccomendations regarding relaying.

 Rich

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 1:41 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 That is your server NDRing the attempted relays back to the spammers.
Since
 spammers tend to use bogus addresses those messages will likely timeout
 after three days as undeliverable.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 12:18 PM
 Subject: IMC originator 


  I believe I have closed my mail server: smtp.actv.com from relaying,
 however
  whenever I go into the IMS queues, I am still seeing messages with
  originator  with destination another host.  What is up with this, am I
  missing something?
 
  Rich
 

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Alverson, Thomas M.

Is there any way to have exchange 5.5 treat those NDR messages to bad
spammer email addresses differently than real emails?  I delete them when I
see them in the queue, but It would be nice if you could make exchange give
up real easily (quickly) when trying to send an NDR to a bad address.

Tom

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 09, 2002 3:11 PM
To: Exchange Discussions
Subject: Re: IMC originator 


The RFC isn't real clear on this. We've gone round on this before and it
seems that server can optionally deny the message up-front or accept it and
than NDR it back to the sender. Exchange does the latter.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 1:55 PM
Subject: RE: IMC originator 


 Ok, but they should not be sending ndr's in response to notification 
 messages is my point. If relaying disabled, messages that are 
 'spoofed' should not generate an NDR in my opinion. I mean, why should 
 it send and fail send and fail to hosts that don't exist just to say, 
 'invalid host'
or
 relaying prohibited or am I missing something?



 -Original Message-
 From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 2:41 PM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 They will still appear for standard, valid NDR's as well.

 William

 -Original Message-
 From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 11:42 AM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 So I should ignore those if they are not causing any other problem? I 
 have followed all the suggested reccomendations regarding relaying.

 Rich

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 1:41 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 That is your server NDRing the attempted relays back to the spammers.
Since
 spammers tend to use bogus addresses those messages will likely 
 timeout after three days as undeliverable.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 12:18 PM
 Subject: IMC originator 


  I believe I have closed my mail server: smtp.actv.com from relaying,
 however
  whenever I go into the IMS queues, I am still seeing messages with 
  originator  with destination another host.  What is up with this, 
  am I missing something?
 
  Rich
 


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread Tom Meunier

Discussion direction 1.  Not without unwanted side effects.  
Discussion direction 2.  I time-out messages quicker than three days,
because the attorneys are impatient.  Imagine that.  But then you don't
have to look at them for as long.  I can ignore them as long as I want,
without blinking even.
Discussion direction 3.  Okay, so you can make a bear dance too, but
would you want to?  (pilfered from FAQ)
Discussion direction 4.  Implement various anti-spam measures that will
also kill valid business-related messages.

The other different directions this discussion can go in are beyond the
scope of my laziness.  Also, my coffee cup is empty.


-Original Message-
From: Alverson, Thomas M. [mailto:[EMAIL PROTECTED]] 
Posted At: Wednesday, January 09, 2002 5:03 PM
Posted To: MSExchange Mailing List
Conversation: IMC originator 
Subject: RE: IMC originator 


Is there any way to have exchange 5.5 treat those NDR messages to bad
spammer email addresses differently than real emails?  I delete them
when I see them in the queue, but It would be nice if you could make
exchange give up real easily (quickly) when trying to send an NDR to a
bad address.

Tom

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 09, 2002 3:11 PM
To: Exchange Discussions
Subject: Re: IMC originator 


The RFC isn't real clear on this. We've gone round on this before and it
seems that server can optionally deny the message up-front or accept it
and than NDR it back to the sender. Exchange does the latter.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 1:55 PM
Subject: RE: IMC originator 


 Ok, but they should not be sending ndr's in response to notification
 messages is my point. If relaying disabled, messages that are 
 'spoofed' should not generate an NDR in my opinion. I mean, why should

 it send and fail send and fail to hosts that don't exist just to say, 
 'invalid host'
or
 relaying prohibited or am I missing something?



 -Original Message-
 From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 2:41 PM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 They will still appear for standard, valid NDR's as well.

 William

 -Original Message-
 From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 11:42 AM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 So I should ignore those if they are not causing any other problem? I
 have followed all the suggested reccomendations regarding relaying.

 Rich

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 1:41 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 That is your server NDRing the attempted relays back to the spammers.
Since
 spammers tend to use bogus addresses those messages will likely
 timeout after three days as undeliverable.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 12:18 PM
 Subject: IMC originator 


  I believe I have closed my mail server: smtp.actv.com from relaying,
 however
  whenever I go into the IMS queues, I am still seeing messages with
  originator  with destination another host.  What is up with this, 
  am I missing something?
 
  Rich
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: IMC originator

2002-01-09 Thread David Lemson

It depends what bad spammer email address means.  If the part of the
address to the right of the @ sign truly does not exist in DNS (e.g.,
zjeorheorejreohre.net), then it should get thrown away very quickly as
soon as the queue is processed.  However, if the part to the right side
of the @ sign exists, and points to a server that is really up (e.g.,
hotmail.com) but the left side is bogus, then the message will hang
around until it connects up and either gets an error during the SMTP
protocol or is accepted and deleted later.

There is no way for Exchange to know that this NDR is destined to a bad
spammer email address, while another NDR is destined for your
grandmother who mistyped your email address.

-Original Message-
From: Alverson, Thomas M. [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 09, 2002 6:03 PM
To: Exchange Discussions
Subject: RE: IMC originator 


Is there any way to have exchange 5.5 treat those NDR messages to bad
spammer email addresses differently than real emails?  I delete them
when I see them in the queue, but It would be nice if you could make
exchange give up real easily (quickly) when trying to send an NDR to a
bad address.

Tom

-Original Message-
From: Daniel Chenault [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 09, 2002 3:11 PM
To: Exchange Discussions
Subject: Re: IMC originator 


The RFC isn't real clear on this. We've gone round on this before and it
seems that server can optionally deny the message up-front or accept it
and than NDR it back to the sender. Exchange does the latter.

- Original Message -
From: Siegel, Richard [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, January 09, 2002 1:55 PM
Subject: RE: IMC originator 


 Ok, but they should not be sending ndr's in response to notification
 messages is my point. If relaying disabled, messages that are 
 'spoofed' should not generate an NDR in my opinion. I mean, why should

 it send and fail send and fail to hosts that don't exist just to say, 
 'invalid host'
or
 relaying prohibited or am I missing something?



 -Original Message-
 From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 2:41 PM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 They will still appear for standard, valid NDR's as well.

 William

 -Original Message-
 From: Siegel, Richard [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 11:42 AM
 To: Exchange Discussions
 Subject: RE: IMC originator 


 So I should ignore those if they are not causing any other problem? I
 have followed all the suggested reccomendations regarding relaying.

 Rich

 -Original Message-
 From: Daniel Chenault [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 09, 2002 1:41 PM
 To: Exchange Discussions
 Subject: Re: IMC originator 


 That is your server NDRing the attempted relays back to the spammers.
Since
 spammers tend to use bogus addresses those messages will likely
 timeout after three days as undeliverable.

 - Original Message -
 From: Siegel, Richard [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, January 09, 2002 12:18 PM
 Subject: IMC originator 


  I believe I have closed my mail server: smtp.actv.com from relaying,
 however
  whenever I go into the IMS queues, I am still seeing messages with
  originator  with destination another host.  What is up with this, 
  am I missing something?
 
  Rich
 


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]