Solved

Phantom Email Returns

Posted on 2009-05-08
2
326 Views
Last Modified: 2013-11-30
Occassionally I get non-deliverable notifications of emails that I did not send OR that are addressed to a bogus mailbox in my domain.  My SMTP is NOT an open relay.  Is this the result of a failed attempt to relay or is this something I should be concerned about?

THanks~
0
Comment
Question by:Bob Schneider
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 23

Assisted Solution

by:Stacy Spear
Stacy Spear earned 100 total points
ID: 24336623
Spammers at work, as long as the server reporting the NDR isn't yours, you are good.
0
 
LVL 71

Accepted Solution

by:
Chris Dent earned 400 total points
ID: 24336680

It's called Backscatter, and generally caused by someone (a spammer) spoofing e-mail addresses (they send as your address / domain). The trouble is it's really really easy to do that, SMTP is really rather insecure.

You can help with this to an extent by implementing an SPF record for your domain. That allows you to state which servers are allowed to send mail as your domain name. It will only help to an extent though, not everyone checks the record, and if they don't they have no way of telling a message is spoofed.

There are wizards to help you make SPF records here:

http://www.openspf.org/

And here:

http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/

If you happen to be using Exchange 2007 it is also possible to construct Transport Rules which can tag outbound mail to prevent Backscatter. Then further rules can be configured to drop Inbound Non-Delivery Reports unless the tag is included (which it would be if the message header).

Chris
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This article outlines some of the reasons why an email message gets flagged as spam on a recipient's end.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question