[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

Domino Email problem, urgent!

my colleague has sent an email with attachment out, but the mail was return, and since then, she has been receiving around 50 emails every 2 minutes with this content:

<MAILER-DAEMON@lh-ag.com>

04/15/05 03:38 PM
           
        To:        <var_email>
        cc:        
        Subject:        [Attachment Removed] Food, Glorious Food!

Mail transmission to <ac@lh-ag.com> has had attachment "pic06868.jpg" removed,
as attachments of this type are not allowed.



so may i know how to stop this incoming emails? she has received more than 2 thousands email up to now.
can anyone tell me what is happening and how to solve this problem? my company is using Lotus Note Domino 5.0.11.
0
zeBes
Asked:
zeBes
  • 6
  • 4
1 Solution
 
Sjef BosmanGroupware ConsultantCommented:
And the question is...?

What you need to find out is what causes this:
- it could be that your server is resending the same mail over and over again (unlikely)
- the destination server has a problem (probably): try to read the SMTP mail itself (open the mail, click View/Page Source)
0
 
zeBesAuthor Commented:
>>sjef_bosman

i've check with the destination server's admin, they claim that their server is ok. so i think i have to resort to block the delivery failure email. so how do i do this? does the domino has anything similar to block sender in, eg: hotmail?

i am new to domino, so can u provide me clear step-by-step instructions? tks

0
 
zeBesAuthor Commented:
latest update- what happen now is the email client will send some stupid mails to random email address within the company.

is this spam?? and can anyone recommend a good anti-spam software, preferably free ware to solve this problem?

tks
0
[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

 
Sjef BosmanGroupware ConsultantCommented:
If this is internal mail, it looks more like a virus. I hope all your internal systems are well-protected against viruses?
If the mails arrive from the outside world, it's probably spam, indeed. There is kSpam, see OpenNTF.org where you can find all documentation and a free download.

The first mail you talked about, i.e. with the Glorious Food, was it indeed sent by your colleague? Or was it also some ghostmail?

Is your Domino-server connected directly to the Internet? If so, is it set up to block mail relays?
0
 
zeBesAuthor Commented:
the whole senario is like this, the first mail (Glorious Food) was sent by my colleague to her friend (outside world), however,i bounce back with the Mailer-Daemon email as written above.
and since then, she received around 50 such mail every 2 minutes!

i have try restart the email server, do whatever i think i could but... u know. and now, some other colleagues also start receiving some email from this colleague email acc (unintended)

for your information:
-sadly, the company think they can save cost by NOT installing any anti-virus software on the email server.
-however, all the workstations are protected by Norton Anti-Virus Enterprise Edt, the virus definition is updated every week.

tks for responding to my question ;)
0
 
zeBesAuthor Commented:
miss a point, yes, the email server connected to internet. but i'm not sure bout block mail relays, do u mean sth like block sender?
0
 
byttaCommented:
Mail relay is using your domino server as a trampoline (see: http://www.menandmice.com/9000/9221_mail_relay.html), usually bad.

But it sounds like some anti-virus software (wherever it is) is blocking/quarantining the message, but sending the wrong signal to the domino server so it keeps retrying

I think you should check the logs on your domino server and the antivirus/smtp server for any unusual logging.
0
 
Sjef BosmanGroupware ConsultantCommented:
To check whether your server is vulnerable for mail-relay attacks, use www.abuse.net/relay.html

0
 
zeBesAuthor Commented:
well, i have run a virus scan and one virus detected (i forgot the name) and deleted. ever since that, no more such stupid mails.. but i'm not sure if it's ok already. so i will leave this question for another day before accepting comment (i won't delete) ;) tks
0
 
Sjef BosmanGroupware ConsultantCommented:
Please check if there are parallels with Q_21392626.html
0
 
zeBesAuthor Commented:
>>sjef
bout the question, i think is quite similar, but i will say it is another case.
anyway, since it stops already for 2 days, i considered it case close until the administrator comes back. i'm just a software guy ;)

tks for all comments!
0

Featured Post

[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

  • 6
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now