Block unsolicited email

[max30]

Hi all,

Anyone know how to block/bounce emails that have no destination address.

For instance, if they send a mail to fred@mydomain.com,
and that user doesnt exsist,, i want it to bounce..

Thanks

 

[Marcs41]

DON'T bounce it! Just disable NDR to the internet, it should go in the BadMail folder and send NO return, as that is what spammers use, amongst other techniques.

Blocking them is different, you need a spamfilter for that, check out

http://www.gfi.com

, they are pretty good.

Marc
[sub]If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions? [/sub]See faq222-2244

 

[max30]

Thanks for that,,

I just realised what i said after i posted the question..

We have an external spam filtering service, they forward all spam to a mail box on our server for us to check. Is it possible to filter spam at our server to delete all messages not in the GAL.

Thanks Again..

 

[Marcs41]

anything not in te GAl should get to the badmail folder, you don't need filters for that.
Or, you can forward NDR's to 1 specific box, and delete that one regularly.
Catching spam on the server requires a third party product, like the GFI I referred to.

Marc
[sub]If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions? [/sub]See faq222-2244

 

[max30]

Because the spam filter has been out sourced, we have no control of this. They capture the spam, and let through the rest. The spam is then sent through to a spam email box on our server. Then we have to sift through it to see whats genuine.
Problem is that its behaving like a catch all address. 90% of the spam has no known recipient, but all this still goes to the spam box. Its reciving about 1000 messages/hour. I have a rule running in outlook to delete all messages not sent to users in the GAL.. It can only run client side and I know this is very long winded.

I think i'll have to bring the spam filtering in house like you suggested. AT least then i can have some control over it.

Anymore thoughts you have would be appreciated.

 

[Marcs41]

Well, you have a strange setup to say the least.
You have the spam 'catching' outsourced, but then they send it anyway for you to filter. Entries not in you GAL should not even be forwarded at all, if they have any decent setup, all they need to do is filter on a list you provide them.
You may as well let it through then and filter automatically.

Marc
[sub]If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions? [/sub]See faq222-2244

 

[max30]

Yep,, Thats what i've said. Its creating the same ammount of email traffic,, and more work for us to do.

This is the first big company i have worked for. This is why i have been asking about how other companys would deal with this problem.

Thanks for your help.

 

[Marcs41]

You're welcome and good luck

Marc
[sub]If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions? [/sub]See faq222-2244

 

[Orenf]

Can you tell us who you outsource your spam filter service from? It sounds like you're getting spam management, and not spam elimination...


Oren

 

[max30]

Yea,, thats true.. Its fairly useless.

The company we use doesnt have a way of matching up with our GAL. They said they are working on it,, But that could mean anything.

 

[Marcs41]

Stop paying until they fix it, that helps ;-)

Marc
[sub]If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions? [/sub]See faq222-2244

 

[max30]

That would be nice..

They just dont provice the service.. And the Boss didnt realise what a pain it would be.
The vendor is message labs.

 

[Orenf]

You might want to switch to Electric Mail (disclosure: I work for them).

They offer the same sevice as message labs (and some added features), and can also filter your mail based on a user list, so that only validated mail gets through, the rest can be bounced back without ever reaching your network. You can try them out for 30 days for free.

Oren
ofriedman < A T > electricmail - d o t - com

 

[F1lby]

I'd contact MessageLabs and have the spam forwarding disabled.
If MessageLabs are forwarding ALL suspect spams to you because of false positives, then I'd seriously consider changing supplier.

 

[buddafish]

check out barracuda spam firewalls... this has probably been the best IT-dollars we have spent this year.

scottie