recieving email sent to recipient that doesn't exist

[jebenson]

Hello all,

I'm rather new at administering Lotus Domino, so please bear with me if I ask any stupid questions.

I am using Domino 6.5 on a W2K server with SP4 and all the latest patches.

My problem is that I am receiving spam that is addressed to recipients who don't (I think) exist in the Domino Directory. For example, I have been getting email for "qmail@mdomain.com" or "FreeMail@mydomain.com", as well as several others. As far as I can tell none of these users are in the Domino Directory.

In the configuration for SMTP Inbound Controls I have "Verify that local domain recipients exist in the Domino Directory" set to "Enabled", which seems like it should stop this. But the emails are being delivered.

So I guess I have 2 questions:

1) How do I view/verify the contents of the Domino Directory?

2) How do I really block emails for which the intended recipient address does not exist?

TIA,
Eric

I used to rock and roll every night and party every day. Then it was every other day. Now I'm lucky if I can find 30 minutes a week in which to get funky. - Homer Simpson

 

[MarkhP]

Taken from some SWBELL notes...

WHY AM I GETTING E-MAIL NOT ADDRESSED TO ME?

It is an unfortunate circumstance that the "From" header of an e-mail message is so easily faked that it is usually not reliable in tracing its true source. (See below for more information about this.) However, spammers often even forge the "To" header of an e-mail message, which is an attempt to confuse the true recipient of the message. One of the problems with the way e-mail works is that the "To" header on messages (the line that normally contains your e-mail address, assuming it's a legitimate message) does not really determine where the message gets delivered. What does determine the recipient of the message is a command (or commands, if there are multiple recipients) sent to the mail server telling it where to send the mail. Unfortunately, these commands are ultimately hidden from the recipient's view, and do not show up anywhere in the mail headers once the message is finally delivered. (A sender can make use of this feature with a "Bcc", or "Blind Carbon Copy," to his or her recipients.)

Blind carbon copying can be useful if you are creating a mailing list, and you wish to ensure that the address of each of your recipients is kept private from the others. (These days, it is an unfortunate circumstance that the publication of your e-mail address will almost inevitably mean you become the target of unsolicited junk mailers, see below for more information.) So a mailer can set the "To" header to be anything he or she wishes; for example, "To: Mailing List Recipients." He or she can then silently tell the mail server, by using the "Bcc," who the actual recipients are.

Unfortunately, this feature can also be used for illegitimate purposes -- for example, in cases of spammers using bogus "To" and "From" headers to disguise their identities. This enables them to send out spam to numerous recipients and protect their anonymity. In cases like these, only a thorough examination of the message's full headers will reveal the source of the message... and even then, this will only reveal the source network or Internet provider. It will not reveal the specific identity of the spammer.

 

[999Dom999]

I have had huge problems with spam and we used to get all sorts of addresses @ourdomain.com. The only way I have managed to stop this was with spam filter that allows you to specify all the local users emails addresses and it checks the header for the recipient and if not listed it rejects it before it receives the data. It has many other filtering capabilities too. Not sure if I'm allowed to list products on here or not but uh.... google "aloaha" to find out more!