Exchange 2003 mail account flooded with NDR reports

Posted on 2008-11-11
Last Modified: 2012-08-14
A mail account on a Windows/Exchange 2003 server is getting flooded with NDR reports.  The server comes clean as a non-relay and the NDR's are coming in from all over.  How is the best way to block this?
Question by:dmoring
    LVL 15

    Accepted Solution

    What are the NDRs to? Is there anything in the outbound queue that does not look right?

    Author Comment

    I will need to look - they are all similiar and spam (Subject, etc.) but from different IP's.  I will look in the outbound queue and see what I can, but I think the original emails are coming from another infected machine (not under my control).  Is there a way to stop the NDR from getting to the recipient?
    LVL 6

    Assisted Solution

    Here's how to do it in Exchange 2007, I don't have a 2003 console to check if you can do something similar.

    The idea is to set up two transport rules: one to tag all outbound messages with a unique tag that only you know, and the other to check all inbound NDR messages (which should include the header) to make sure your unique tag is there. If your tag isn't there, it wasn't sent by your organization, and you can drop the message.

    Author Comment

    Hmmm... yes, backscatter might work if I can make it work with 2003 - let me check.  Thanks.

    Author Closing Comment

    Thanks - its stopped on its own, but these are great answers to try when (no if) it happens again - thanks!

    Featured Post

    Too many email signature updates to deal with?

    Are you constantly visiting users’ desks making changes to email signatures? Feel like it’s taking up all of your time? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

    Join & Write a Comment

    We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now