Possible NDR attach

Posted on 2006-05-22
Medium Priority
Last Modified: 2010-03-06
Hey there,

I have a server that is getting loads of false domain names in the message queues in Exchange. We are running an SBS2003 server with Exchange SP2. Latelly i have noticed a large number of domians in the queues failing bacause the domain doesnt exist, the messages are from postmaster so it looks like a NDR attach. I have tried using the message receipient filtering, but it doesnt seem to change anything. The queues are sitting at about 2000 domains. I am runnnig Trend Micro Scanmail for exchange with Anto Spam enabled. Does anyone know how to stop the messages from being sent back to the false domain from postmaster and clearing the queues.

Question by:CodeBlueEngineers
LVL 11

Accepted Solution

elbereth21 earned 336 total points
ID: 16733210
Hi CodeBlueEngineers,
against NDR attacks, there is this strategy:

LVL 31

Assisted Solution

LeeDerbyshire earned 332 total points
ID: 16734624
Exchange 2003?  Go to Global Settings/Internet Message Formats , and look at the properties of the Default format.  On the Advanced tab, you can turn off non-delivery reports (NDRs).
LVL 104

Assisted Solution

Sembee earned 332 total points
ID: 16734658
Configuring recipient filtering will only stop further email messages. It will not deal with what you already have.
Plus I don't recommend turning off NDRs, that just hides the problem.

Take a look at my cleanup article. http://www.amset.info/exchange/spam-cleanup.asp
That will guide you through identifying what the source of the attack is, and then how to cleanup the mess it leaves behind.


Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you looking for the options available for exporting EDB files to PST? You may be confused as they are different in different Exchange versions. Here, I will discuss some options available.
Mailbox Corruption is a nightmare every Exchange DBA wishes he never has. Recovering from it can be super-hectic if not entirely futile. And though techniques like the New-MailboxRepairRequest cmdlet have been designed to help with fixing minor corr…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Suggested Courses
Course of the Month13 days, 16 hours left to enroll

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question