TONS of Dead Mail!!!!!!!!!!

[CharlieIT]

I'm running a Lotus Notes server (version 5.08) and I'm getting TONS of Dead Mail.

About a year ago (to make sure that my server was NOT an open relay), I configured the SMTP Inbound Controls to allow messages from external domains to only be sent to my internal domain. I also configured SMTP outbound Controls so that only messages coming from my Notes address can be sent to the internet. I then submitted our server address to the ORDB for an open relay test--which was successful (it is not an open relay).

This has been fine for a year now. But now, I'm getting inundated with TONS of dead mail. The "to" and "from" for these messages have my Lotus Notes server address (so someone is spoofing my server address as the "to" and "from" in an attempt to relay messages).

I have so many dead mail messages, I have to delete them manually everyday. I figure that in order to stop the dead mail from piling up, I have to configure my SMTP inbound Controls to prevent the messages from even coming in. But how do I do this if the spammers are spoofing my server's address?


Can anyone help?

 

[Packet7]

Hey,
I came across a similar issue when we were on R5, but it turned out they were dead message that we bounced to fake senders.

Are you sure your box isn't under some typw of Spam flood? I would recommend upgrading to R6. R6 has a new feature that you can enable to only accept mail to valid user accounts. Now, instead of a few hundred dead messages, we have 2 or 3. Replication, Virus Scanning, Spam Filtering and routing has all improved since we upgraded.

You can also enable RDNS, so that each message is verified to be sent from a valid address. This should cut down on your bounce messages as well.

Just an idea. Hope it helps.

Rgds,

John Judge