Re: [Declude.JunkMail] Imail nul
Hey Scott, It was filling up the test mailbox, then it started bouncing again when the mail box was full. I guess what I am looking for is a way to delete E-mails addressed to non-existing accounts rather than having them bounce. Bennie - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 7:57 AM Subject: Re: [Declude.JunkMail] Imail nul I may be beating a dead horse, but I cant seem to find any threads that talk about this. Back when I first got declude and was using it with my imail system I setup the following in Imail. 1) Made a user mailbox: test made all mail forward to: nul 2) Set up an Aliases: nobody made it resolve to: test all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. but when I iupgraded my Imail.. this test does not seem to work anymore. Very confused. Please help From what you describe, previously E-mail addressed to non-existent accounts would be deleted. Now, that doesn't work. So my question would be where is all that mail going? Is it going to the test account, but not deleted? Or is it going somewhere else? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail nul
Why don't you just create a rule for that user that says something like... if the header contains date delete the message? You could put any phrase in there that is in every email message. -Joe - Original Message - From: Bennie [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 27, 2004 5:01 AM Subject: Re: [Declude.JunkMail] Imail nul Hey Scott, It was filling up the test mailbox, then it started bouncing again when the mail box was full. I guess what I am looking for is a way to delete E-mails addressed to non-existing accounts rather than having them bounce. Bennie - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 7:57 AM Subject: Re: [Declude.JunkMail] Imail nul I may be beating a dead horse, but I cant seem to find any threads that talk about this. Back when I first got declude and was using it with my imail system I setup the following in Imail. 1) Made a user mailbox: test made all mail forward to: nul 2) Set up an Aliases: nobody made it resolve to: test all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. but when I iupgraded my Imail.. this test does not seem to work anymore. Very confused. Please help From what you describe, previously E-mail addressed to non-existent accounts would be deleted. Now, that doesn't work. So my question would be where is all that mail going? Is it going to the test account, but not deleted? Or is it going somewhere else? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail nul
all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. Do you think that it's helping your server's performance to spool mail that will never be delivered to a human? The 'nobody' alias is the enemy of server integrity and performance. Please search the archives--they're down now--for lots of info. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail nul
I may be beating a dead horse, but I cant seem to find any threads that talk about this. Back when I first got declude and was using it with my imail system I setup the following in Imail. 1) Made a user mailbox: test made all mail forward to: nul 2) Set up an Aliases: nobody made it resolve to: test all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. but when I iupgraded my Imail.. this test does not seem to work anymore. Very confused. Please help From what you describe, previously E-mail addressed to non-existent accounts would be deleted. Now, that doesn't work. So my question would be where is all that mail going? Is it going to the test account, but not deleted? Or is it going somewhere else? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail nul
I've never tried it, but couldn't you just have the nobody ailias resolve to NUL? It's an interesting concept that would present at least one solution to the dictionary attacks. I might give that a try on one of my stable domains (no deleted users in years) just to see what it does to the dictionary attacks. They are the biggest problem I have. -Joe - Original Message - From: Bennie To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 5:18 AM Subject: [Declude.JunkMail] Imail nul Hello all, I may be beating a dead horse, but I cant seem to find any threads that talk about this. Back when I first got declude and was using it with my imail system I setup the following in Imail. 1) Made a user mailbox: test made all mail forward to: nul 2) Set up an Aliases: nobody made it resolve to: test all mail that was not sent to avalid user name will be passed to thealias "nobody". Which will resolve to "test". As the mail arrives in "test"it is deleted. but when I iupgraded my Imail.. this test does not seem to work anymore. Very confused. Please help Bennie
Re: [Declude.JunkMail] Imail nul
Try setting it to go to username-NUL rather than just NUL. Note that you don't need the mailbox for this, just put in the nobody alias to directto username-NUL. Darin. - Original Message - From: Joe Wolf To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 9:16 AM Subject: Re: [Declude.JunkMail] Imail nul I've never tried it, but couldn't you just have the nobody ailias resolve to NUL? It's an interesting concept that would present at least one solution to the dictionary attacks. I might give that a try on one of my stable domains (no deleted users in years) just to see what it does to the dictionary attacks. They are the biggest problem I have. -Joe - Original Message - From: Bennie To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 5:18 AM Subject: [Declude.JunkMail] Imail nul Hello all, I may be beating a dead horse, but I cant seem to find any threads that talk about this. Back when I first got declude and was using it with my imail system I setup the following in Imail. 1) Made a user mailbox: test made all mail forward to: nul 2) Set up an Aliases: nobody made it resolve to: test all mail that was not sent to avalid user name will be passed to thealias "nobody". Which will resolve to "test". As the mail arrives in "test"it is deleted. but when I iupgraded my Imail.. this test does not seem to work anymore. Very confused. Please help Bennie
Re: [Declude.JunkMail] Imail nul
OK, I'm convinced. Whoever posted it made me think it might be a method to try. I yield to those with superior knowledge. -Joe - Original Message - From: Matt To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 2:39 PM Subject: Re: [Declude.JunkMail] Imail nul Someone recently experienced a situation where a spammer distributed a list of nonexistent addresses and totally hammered a domain with them. It seems that not all spammers care about the purity of their data and an accepted message may get that address on their list, even if you accepted thousands of them. If this wasn't the case, your point would make more sense, and I had contemplated this myself.I don't use nobody aliases now, I just let the messages bounce back, and this way legitimate senders will get their E-mails returned when unaddressable. In the future there will likely be a method of detecting and stopping a dictionary attack, but for smaller domains, these attacks seem limited to only a list of a few hundred or thousand generic addresses.MattJoe Wolf wrote: Sandy, I'm not going to claim to be an email server expert, but here's what I see... I could be wrong. When you're hit with a dictionary attack we all know they send to thousands of addresses at the domain. If the final delivery address is invalid the server creates an "Unknown User" (or whatever it's called) message that it tries to send back to the sender. If you have high queue retires those messages sit in the queue for a long time being retried over and over again. At least that's what appears to be happening to me. Now if I sent all those attempts to NUL then the server doesn't have to worry about all the unknown user messages, etc. and the queue will actually be open to valid traffic. I don't know if Imail will actually queue a message going to NUL or not. I've also noticed that on a couple of domains where the customer has a nobody alias the dictionary attacks cut off pretty quick. They don't attempt to go through the entire alphabet like they do on a domain without a nobody alias. I'm guessing that they don't want to waste their time either on a domain that will accept anything for an address? Like I said... I could be 100% wrong on this entire matter, but it seems reasonable. I'm open to the knowledge of those that know a whole lot more than I do. -Joe - Original Message - From: "Sanford Whiteman" [EMAIL PROTECTED] To: "Bennie" [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 10:51 AM Subject: Re: [Declude.JunkMail] Imail nul all mail that was not sent to a valid user name will be passed to the alias "nobody". Which will resolve to "test". As the mail arrives in "test" it is deleted. Do you think that it's helping your server's performance to spool mail that will never be delivered to a human? The 'nobody' alias is the enemy of server integrity and performance. Please search the archives--they're down now--for lots of info. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Imail nul
Someone recently experienced a situation where a spammer distributed a list of nonexistent addresses and totally hammered a domain with them. It seems that not all spammers care about the purity of their data and an accepted message may get that address on their list, even if you accepted thousands of them. If this wasn't the case, your point would make more sense, and I had contemplated this myself. I don't use nobody aliases now, I just let the messages bounce back, and this way legitimate senders will get their E-mails returned when unaddressable. In the future there will likely be a method of detecting and stopping a dictionary attack, but for smaller domains, these attacks seem limited to only a list of a few hundred or thousand generic addresses. Matt Joe Wolf wrote: Sandy, I'm not going to claim to be an email server expert, but here's what I see... I could be wrong. When you're hit with a dictionary attack we all know they send to thousands of addresses at the domain. If the final delivery address is invalid the server creates an "Unknown User" (or whatever it's called) message that it tries to send back to the sender. If you have high queue retires those messages sit in the queue for a long time being retried over and over again. At least that's what appears to be happening to me. Now if I sent all those attempts to NUL then the server doesn't have to worry about all the unknown user messages, etc. and the queue will actually be open to valid traffic. I don't know if Imail will actually queue a message going to NUL or not. I've also noticed that on a couple of domains where the customer has a nobody alias the dictionary attacks cut off pretty quick. They don't attempt to go through the entire alphabet like they do on a domain without a nobody alias. I'm guessing that they don't want to waste their time either on a domain that will accept anything for an address? Like I said... I could be 100% wrong on this entire matter, but it seems reasonable. I'm open to the knowledge of those that know a whole lot more than I do. -Joe - Original Message - From: "Sanford Whiteman" [EMAIL PROTECTED] To: "Bennie" [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 10:51 AM Subject: Re: [Declude.JunkMail] Imail nul all mail that was not sent to a valid user name will be passed to the alias "nobody". Which will resolve to "test". As the mail arrives in "test" it is deleted. Do you think that it's helping your server's performance to spool mail that will never be delivered to a human? The 'nobody' alias is the enemy of server integrity and performance. Please search the archives--they're down now--for lots of info. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Imail nul
Only problem I see with that is valid business email where a user mistyped the email address of the recipient. Without getting the Unknown User response, they assume the recipient got the message. My business customers would hate a change like this as their customers continually make up their email addresses...so they have a ton of email aliases in place. I agree that there is a bit of a performance hit to send this message, but for my systems that's a necessary evil. Does anyone know if this error message gets sent at the envelope level? Darin. - Original Message - From: Joe Wolf [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 12:51 PM Subject: Re: [Declude.JunkMail] Imail nul Sandy, I'm not going to claim to be an email server expert, but here's what I see... I could be wrong. When you're hit with a dictionary attack we all know they send to thousands of addresses at the domain. If the final delivery address is invalid the server creates an Unknown User (or whatever it's called) message that it tries to send back to the sender. If you have high queue retires those messages sit in the queue for a long time being retried over and over again. At least that's what appears to be happening to me. Now if I sent all those attempts to NUL then the server doesn't have to worry about all the unknown user messages, etc. and the queue will actually be open to valid traffic. I don't know if Imail will actually queue a message going to NUL or not. I've also noticed that on a couple of domains where the customer has a nobody alias the dictionary attacks cut off pretty quick. They don't attempt to go through the entire alphabet like they do on a domain without a nobody alias. I'm guessing that they don't want to waste their time either on a domain that will accept anything for an address? Like I said... I could be 100% wrong on this entire matter, but it seems reasonable. I'm open to the knowledge of those that know a whole lot more than I do. -Joe - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Bennie [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 10:51 AM Subject: Re: [Declude.JunkMail] Imail nul all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. Do you think that it's helping your server's performance to spool mail that will never be delivered to a human? The 'nobody' alias is the enemy of server integrity and performance. Please search the archives--they're down now--for lots of info. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. _ [This E-mail virus scanned by 4C Web] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail nul
Sandy, I'm not going to claim to be an email server expert, but here's what I see... I could be wrong. When you're hit with a dictionary attack we all know they send to thousands of addresses at the domain. If the final delivery address is invalid the server creates an Unknown User (or whatever it's called) message that it tries to send back to the sender. If you have high queue retires those messages sit in the queue for a long time being retried over and over again. At least that's what appears to be happening to me. Now if I sent all those attempts to NUL then the server doesn't have to worry about all the unknown user messages, etc. and the queue will actually be open to valid traffic. I don't know if Imail will actually queue a message going to NUL or not. I've also noticed that on a couple of domains where the customer has a nobody alias the dictionary attacks cut off pretty quick. They don't attempt to go through the entire alphabet like they do on a domain without a nobody alias. I'm guessing that they don't want to waste their time either on a domain that will accept anything for an address? Like I said... I could be 100% wrong on this entire matter, but it seems reasonable. I'm open to the knowledge of those that know a whole lot more than I do. -Joe - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Bennie [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 10:51 AM Subject: Re: [Declude.JunkMail] Imail nul all mail that was not sent to a valid user name will be passed to the alias nobody. Which will resolve to test. As the mail arrives in test it is deleted. Do you think that it's helping your server's performance to spool mail that will never be delivered to a human? The 'nobody' alias is the enemy of server integrity and performance. Please search the archives--they're down now--for lots of info. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
