Autoreply during major virus outbreak (novarg/mydoom)

Could everybody please turn off their autoreply on their virus scanner. It
is totally getting on my nerves. I am not receiving any actual viruses just
tonnes of notifications from postmasters about a virus I do not have. This
virus is obviously spoofing the source email address and autoreply is
possibly unwittingly contributing to the spread of the virus. When you reply
to a system that might not have been infected with the original infected
message you risk infecting a new system. Unless your antivirus software is
clever enough to know the real source please do me a favour and turn it off.

--
Darwood MCSE

Remove nospamme from email address to reply.

brains
Thu Jan 29 04:13:25 CST 2004

On Thu, 29 Jan 2004 09:59:31 -0000, "Darwood"
<darrenw@nospamme.woodfordcomputers.co.uk> wrote:

>Could everybody please turn off their autoreply on their virus scanner.

OK - turning it off now. Let me know when I can put it back on again
:-)

--
Hiram Hackenbacker

Javier
Thu Jan 29 07:36:18 CST 2004

>>Could everybody please turn off their autoreply on their virus scanner.
>
> OK - turning it off now. Let me know when I can put it back on again

Do you want us to turn off NDR notifications also? :-)

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

Javier
Thu Jan 29 07:34:44 CST 2004

Darwood,

This is probably not the AV autoreply (since I don't know of any AV program
that sends back the still-infected message). What you see are Non Delivery
Reports (NDRs) from different mailservers. This is not an AV program
thing... but an general mail server thing. How else you would know if you
sent a message to a wrong address?

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

"Hiram Hackenbacker" <brains@sky.com> wrote in message
news:4018dca5.9908738@news.claranews.com...
> On Thu, 29 Jan 2004 09:59:31 -0000, "Darwood"
> <darrenw@nospamme.woodfordcomputers.co.uk> wrote:
>
> >Could everybody please turn off their autoreply on their virus scanner.
>
> OK - turning it off now. Let me know when I can put it back on again
> :-)
>
> --
> Hiram Hackenbacker

Darwood
Thu Jan 29 07:45:17 CST 2004

Whoa! I'm not pretending to know more than the MVP's etc here I just think
it's a good idea. I got the idea from here
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci94642
3,00.html
"Administrators should have policies in place to turn off notification of
invalid e-mail addresses during major worm outbreaks, Dunham said. In fact,
Mydoom's creator may have intentionally created the worm so it would bog
down mail systems."

I would say NDR's should be turned off too. If anyone thinks this is a bad
idea please jump in.

Later all


--
Darwood MCSE


Remove nospamme from email address to reply.

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:OQ35gzm5DHA.1040@TK2MSFTNGP10.phx.gbl...
> >>Could everybody please turn off their autoreply on their virus scanner.
> >
> > OK - turning it off now. Let me know when I can put it back on again
>
> Do you want us to turn off NDR notifications also? :-)
>
> --
> Javier [SBS MVP]
>
> << SBS ROCKS !!! >>
>
>

brains
Thu Jan 29 07:48:30 CST 2004

On Thu, 29 Jan 2004 08:36:18 -0500, "Javier Gomez [SBS MVP]"
<javier_gomez@remove.this.engineer.com> wrote:

>>>Could everybody please turn off their autoreply on their virus scanner.
>>
>> OK - turning it off now. Let me know when I can put it back on again
>
>Do you want us to turn off NDR notifications also? :-)

You forgot that I smiled also. You need to direct your question to
the original poster.

--
Hiram Hackenbacker

Javier
Thu Jan 29 08:00:40 CST 2004

> You forgot that I smiled also. You need to direct your question to
> the original poster.

I know... I was also joking. For some reason my first post appeared later
than the 1st.

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

Javier
Thu Jan 29 08:07:58 CST 2004

No... I understand what you are saying and I agree (except for the NDRs). I
do not send people notifications that they sent me a virus-infected mail...
thats plain dumb (I don't even know why some AV packages have that feature).

What I'm saying (on my first post) is that what you are probably seeing are
NDRs. That is definitely something that you shouldn't turn off. Let's say I
send you a important business proposal (just like the one from the late wife
of the president of Nigeria*) and I misspell you name... I WANT an email
back saying that you didn't get the message (else I would think you are not
taking me seriusly).

[For some reason my first post appeared later than the 2nd one]

* - This is joke BTW :-)

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:umgpE4m5DHA.2404@TK2MSFTNGP12.phx.gbl...
> Whoa! I'm not pretending to know more than the MVP's etc here I just think
> it's a good idea. I got the idea from here
>
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci94642
> 3,00.html
> "Administrators should have policies in place to turn off notification of
> invalid e-mail addresses during major worm outbreaks, Dunham said. In
fact,
> Mydoom's creator may have intentionally created the worm so it would bog
> down mail systems."
>
> I would say NDR's should be turned off too. If anyone thinks this is a bad
> idea please jump in.
>
> Later all
>
>
> --
> Darwood MCSE
>
>
> Remove nospamme from email address to reply.
>
> "Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
> message news:OQ35gzm5DHA.1040@TK2MSFTNGP10.phx.gbl...
> > >>Could everybody please turn off their autoreply on their virus
scanner.
> > >
> > > OK - turning it off now. Let me know when I can put it back on again
> >
> > Do you want us to turn off NDR notifications also? :-)
> >
> > --
> > Javier [SBS MVP]
> >
> > << SBS ROCKS !!! >>
> >
> >
>
>

Darwood
Thu Jan 29 09:25:20 CST 2004

Sorry I didn't realise you guys were being sarcastic. I am from Wales where
we don't have such a thing. Obviously Ken Dunham is as in the dark here as I
am.
I am getting the autoreplies and the NDR's. Whilst the autoreplies don't
contain the virus they are mildly annoying. However the NDR's seem to be far
outweighing the autoreplies at the moment. If we can turn the NDR off as
well why not? As Javier alluded most of the email these days is useless
anyway. Is it better to miss the odd email from someone (during the high
activity period) who can't type my name or to contribute to the propagation
of this virus?
--
Darwood MCSE

Remove nospamme from email address to reply.

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:eC76IBn5DHA.2404@TK2MSFTNGP12.phx.gbl...
> > You forgot that I smiled also. You need to direct your question to
> > the original poster.
>
> I know... I was also joking. For some reason my first post appeared later
> than the 1st.
>
> --
> Javier [SBS MVP]
>
> << SBS ROCKS !!! >>
>
>

Hendrik
Thu Jan 29 09:30:36 CST 2004

Question is, why can't the AV software have a parameter linked to the
definition, so that it would know when to send an alert to the sender, and
when not.
Should be a very easy thing to make, but haven't seen it yet. If anybody has
that option in their AV, please let me know.

HC

Hiram Hackenbacker wrote:
> On Thu, 29 Jan 2004 09:59:31 -0000, "Darwood"
> <darrenw@nospamme.woodfordcomputers.co.uk> wrote:
>
>> Could everybody please turn off their autoreply on their virus
>> scanner.
>
> OK - turning it off now. Let me know when I can put it back on again
> :-)

Hendrik
Thu Jan 29 09:33:13 CST 2004

There should be a way to send a NDR, but delete the attachment. That way,
nobody could get infected by it, and it saves bandwith. If anybody knows how
to do this on SBS, let me know. I looked for it a while ago, but couldn't
find it.

HC

Darwood wrote:
> Sorry I didn't realise you guys were being sarcastic. I am from Wales
> where we don't have such a thing. Obviously Ken Dunham is as in the
> dark here as I am.
> I am getting the autoreplies and the NDR's. Whilst the autoreplies
> don't contain the virus they are mildly annoying. However the NDR's
> seem to be far outweighing the autoreplies at the moment. If we can
> turn the NDR off as well why not? As Javier alluded most of the email
> these days is useless anyway. Is it better to miss the odd email from
> someone (during the high activity period) who can't type my name or
> to contribute to the propagation of this virus?
>
> "Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com>
> wrote in message news:eC76IBn5DHA.2404@TK2MSFTNGP12.phx.gbl...
>>> You forgot that I smiled also. You need to direct your question to
>>> the original poster.
>>
>> I know... I was also joking. For some reason my first post appeared
>> later than the 1st.
>>
>> --
>> Javier [SBS MVP]
>>
>> << SBS ROCKS !!! >>

Darwood
Thu Jan 29 09:39:37 CST 2004

"Hendrik Cannoodt" <ask@for.it> wrote in message
news:#GrMZzn5DHA.2480@TK2MSFTNGP10.phx.gbl...
> Question is, why can't the AV software have a parameter linked to the
> definition, so that it would know when to send an alert to the sender, and
> when not.
> Should be a very easy thing to make, but haven't seen it yet. If anybody
has
> that option in their AV, please let me know.
>
The NDR comes from Exchange rather than the AV doesn't it? It would have to
be Exchange that had the option then I presume?

David
Thu Jan 29 10:07:30 CST 2004

Hi all,

Here's one for all you new [and old] MVPs! We all love you and we hope you
all know!

SBS2k set-up to add disclaimers to outgoing mail as per smallbizserver.net
instructions - working fine. We have a single customer who we are having
problems sending email to - error message we get is:

You do not have permission to send to this recipient. For assistance,
contact your system administrator.
<OurServer#5.7.1 smtp;501 5.7.1 <sender's email address>... Sender refused
by the DNSBL - MAIL REJECTED - DYNAMIC IP RANGE - RELAY VIA YOUR PROVIDER
(SORBSDUL)>

Now we have a cable modem set-up with dynamic [although constantly updating]
IP address. In effect it's static although not guaranteed as such. Our
outgoing email is sent via DNS through Exchange 2k. We're happy with that
but what I want to find out is if it is possible for us to send outgoing
emails to this particular recipient's domain via our ISPs mail servers
rather than via DNS, but only for them.

Had a dig around and [probably because its been a long - and not good! - day
thus far] haven't managed to figure it out - would I be right in assuming
we'd have to configure a smart host of some kind?

Regards,



David




"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:O6cV65k5DHA.2560@TK2MSFTNGP09.phx.gbl...
> Could everybody please turn off their autoreply on their virus scanner. It
> is totally getting on my nerves. I am not receiving any actual viruses
just
> tonnes of notifications from postmasters about a virus I do not have. This
> virus is obviously spoofing the source email address and autoreply is
> possibly unwittingly contributing to the spread of the virus. When you
reply
> to a system that might not have been infected with the original infected
> message you risk infecting a new system. Unless your antivirus software is
> clever enough to know the real source please do me a favour and turn it
off.
>
> --
> Darwood MCSE
>
> Remove nospamme from email address to reply.
>
>

Darwood
Thu Jan 29 10:09:58 CST 2004


"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:eHF083n5DHA.2692@TK2MSFTNGP09.phx.gbl...
> "Hendrik Cannoodt" <ask@for.it> wrote in message
> news:#GrMZzn5DHA.2480@TK2MSFTNGP10.phx.gbl...
> > Question is, why can't the AV software have a parameter linked to the
> > definition, so that it would know when to send an alert to the sender,
and
> > when not.
> > Should be a very easy thing to make, but haven't seen it yet. If anybody
> has
> > that option in their AV, please let me know.
> >
> The NDR comes from Exchange rather than the AV doesn't it? It would have
to
> be Exchange that had the option then I presume?
>

From KB324636
Turn Off Non-Delivery Reports and Delivery Reports
To turn off non-delivery reports or delivery reports, follow these steps:
1.. Start Exchange System Manager.
2.. Expand Global Settings, and then click Internet Message Formats.
3.. Right-click Default, click Properties, and then click the Advanced
tab.
4.. Do either of the following:
a.. To prevent non-delivery reports from being sent, click to clear the
Allow non-delivery reports check box.
b.. To prevent delivery reports from being sent, click to clear the
Allow delivery reports check box.

Javier
Thu Jan 29 10:18:23 CST 2004

Hi David!

You can use a Smarthost only for that ISP. I'm preparing a small document
which explains how to set this up... you can download it here:
http://www.inqu.net/Smarthost.zip

[Check the How do I set this up / Smarthost for specific domains section]

Please be aware that this is still in beta... any corrections and/or
comments will be greatly appreciated.

Thanks!

--
Javier [SBS MVP]

<< SBS ROCK!!! >>

"David Elders" <david.elders@akdsystems.co.uk> wrote in message
news:eJHpBIo5DHA.2480@TK2MSFTNGP10.phx.gbl...
> Hi all,
>
> Here's one for all you new [and old] MVPs! We all love you and we hope you
> all know!
>
> SBS2k set-up to add disclaimers to outgoing mail as per smallbizserver.net
> instructions - working fine. We have a single customer who we are having
> problems sending email to - error message we get is:
>
> You do not have permission to send to this recipient. For assistance,
> contact your system administrator.
> <OurServer#5.7.1 smtp;501 5.7.1 <sender's email address>... Sender refused
> by the DNSBL - MAIL REJECTED - DYNAMIC IP RANGE - RELAY VIA YOUR PROVIDER
> (SORBSDUL)>
>
> Now we have a cable modem set-up with dynamic [although constantly
updating]
> IP address. In effect it's static although not guaranteed as such. Our
> outgoing email is sent via DNS through Exchange 2k. We're happy with that
> but what I want to find out is if it is possible for us to send outgoing
> emails to this particular recipient's domain via our ISPs mail servers
> rather than via DNS, but only for them.
>
> Had a dig around and [probably because its been a long - and not good! -
day
> thus far] haven't managed to figure it out - would I be right in assuming
> we'd have to configure a smart host of some kind?
>
> Regards,
>
>
>
> David
>
>
>
>
> "Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
> news:O6cV65k5DHA.2560@TK2MSFTNGP09.phx.gbl...
> > Could everybody please turn off their autoreply on their virus scanner.
It
> > is totally getting on my nerves. I am not receiving any actual viruses
> just
> > tonnes of notifications from postmasters about a virus I do not have.
This
> > virus is obviously spoofing the source email address and autoreply is
> > possibly unwittingly contributing to the spread of the virus. When you
> reply
> > to a system that might not have been infected with the original infected
> > message you risk infecting a new system. Unless your antivirus software
is
> > clever enough to know the real source please do me a favour and turn it
> off.
> >
> > --
> > Darwood MCSE
> >
> > Remove nospamme from email address to reply.
> >
> >
>
>

Darwood
Thu Jan 29 10:20:18 CST 2004

Sounds like your customer could have been blacklisted as an open relay.

--
Darwood MCSE

Remove nospamme from email address to reply.

"David Elders" <david.elders@akdsystems.co.uk> wrote in message
news:eJHpBIo5DHA.2480@TK2MSFTNGP10.phx.gbl...
> Hi all,
>
> Here's one for all you new [and old] MVPs! We all love you and we hope you
> all know!
>
> SBS2k set-up to add disclaimers to outgoing mail as per smallbizserver.net
> instructions - working fine. We have a single customer who we are having
> problems sending email to - error message we get is:
>
> You do not have permission to send to this recipient. For assistance,
> contact your system administrator.
> <OurServer#5.7.1 smtp;501 5.7.1 <sender's email address>... Sender refused
> by the DNSBL - MAIL REJECTED - DYNAMIC IP RANGE - RELAY VIA YOUR PROVIDER
> (SORBSDUL)>
>
> Now we have a cable modem set-up with dynamic [although constantly
updating]
> IP address. In effect it's static although not guaranteed as such. Our
> outgoing email is sent via DNS through Exchange 2k. We're happy with that
> but what I want to find out is if it is possible for us to send outgoing
> emails to this particular recipient's domain via our ISPs mail servers
> rather than via DNS, but only for them.
>
> Had a dig around and [probably because its been a long - and not good! -
day
> thus far] haven't managed to figure it out - would I be right in assuming
> we'd have to configure a smart host of some kind?
>
> Regards,
>
>
>
> David
>

Javier
Thu Jan 29 10:29:49 CST 2004

I think that doing that even stop internal NDRs... so be careful.

--
Javier [SBS MVP]

<< SBS ROCK!!! >>

"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:e92h6Io5DHA.2008@TK2MSFTNGP10.phx.gbl...
>
> "Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
> news:eHF083n5DHA.2692@TK2MSFTNGP09.phx.gbl...
> > "Hendrik Cannoodt" <ask@for.it> wrote in message
> > news:#GrMZzn5DHA.2480@TK2MSFTNGP10.phx.gbl...
> > > Question is, why can't the AV software have a parameter linked to the
> > > definition, so that it would know when to send an alert to the sender,
> and
> > > when not.
> > > Should be a very easy thing to make, but haven't seen it yet. If
anybody
> > has
> > > that option in their AV, please let me know.
> > >
> > The NDR comes from Exchange rather than the AV doesn't it? It would have
> to
> > be Exchange that had the option then I presume?
> >
>
> From KB324636
> Turn Off Non-Delivery Reports and Delivery Reports
> To turn off non-delivery reports or delivery reports, follow these steps:
> 1.. Start Exchange System Manager.
> 2.. Expand Global Settings, and then click Internet Message Formats.
> 3.. Right-click Default, click Properties, and then click the Advanced
> tab.
> 4.. Do either of the following:
> a.. To prevent non-delivery reports from being sent, click to clear
the
> Allow non-delivery reports check box.
> b.. To prevent delivery reports from being sent, click to clear the
> Allow delivery reports check box.
>
>

David
Thu Jan 29 10:39:48 CST 2004

Thanks Javier,

Just realised I hit 'reply group' instead of 'new post' - been one of THOSE
days...! Apologies to all for any confusion.

Cheers again,



David

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:eK82qNo5DHA.2720@TK2MSFTNGP09.phx.gbl...
> Hi David!
>
> You can use a Smarthost only for that ISP. I'm preparing a small document
> which explains how to set this up... you can download it here:
> http://www.inqu.net/Smarthost.zip
>
> [Check the How do I set this up / Smarthost for specific domains section]
>
> Please be aware that this is still in beta... any corrections and/or
> comments will be greatly appreciated.
>
> Thanks!
>
> --
> Javier [SBS MVP]
>
> << SBS ROCK!!! >>
>
> "David Elders" <david.elders@akdsystems.co.uk> wrote in message
> news:eJHpBIo5DHA.2480@TK2MSFTNGP10.phx.gbl...
> > Hi all,
> >
> > Here's one for all you new [and old] MVPs! We all love you and we hope
you
> > all know!
> >
> > SBS2k set-up to add disclaimers to outgoing mail as per
smallbizserver.net
> > instructions - working fine. We have a single customer who we are having
> > problems sending email to - error message we get is:
> >
> > You do not have permission to send to this recipient. For assistance,
> > contact your system administrator.
> > <OurServer#5.7.1 smtp;501 5.7.1 <sender's email address>... Sender
refused
> > by the DNSBL - MAIL REJECTED - DYNAMIC IP RANGE - RELAY VIA YOUR
PROVIDER
> > (SORBSDUL)>
> >
> > Now we have a cable modem set-up with dynamic [although constantly
> updating]
> > IP address. In effect it's static although not guaranteed as such. Our
> > outgoing email is sent via DNS through Exchange 2k. We're happy with
that
> > but what I want to find out is if it is possible for us to send outgoing
> > emails to this particular recipient's domain via our ISPs mail servers
> > rather than via DNS, but only for them.
> >
> > Had a dig around and [probably because its been a long - and not good! -
> day
> > thus far] haven't managed to figure it out - would I be right in
assuming
> > we'd have to configure a smart host of some kind?
> >
> > Regards,
> >
> >
> >
> > David
> >
> >
> >
> >
> > "Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
> > news:O6cV65k5DHA.2560@TK2MSFTNGP09.phx.gbl...
> > > Could everybody please turn off their autoreply on their virus
scanner.
> It
> > > is totally getting on my nerves. I am not receiving any actual viruses
> > just
> > > tonnes of notifications from postmasters about a virus I do not have.
> This
> > > virus is obviously spoofing the source email address and autoreply is
> > > possibly unwittingly contributing to the spread of the virus. When you
> > reply
> > > to a system that might not have been infected with the original
infected
> > > message you risk infecting a new system. Unless your antivirus
software
> is
> > > clever enough to know the real source please do me a favour and turn
it
> > off.
> > >
> > > --
> > > Darwood MCSE
> > >
> > > Remove nospamme from email address to reply.
> > >
> > >
> >
> >
>
>

Darwood
Thu Jan 29 11:00:23 CST 2004

Excellent document Javier.

--
Darwood MCSE

Remove nospamme from email address to reply.

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:eK82qNo5DHA.2720@TK2MSFTNGP09.phx.gbl...
> Hi David!
>
> You can use a Smarthost only for that ISP. I'm preparing a small document
> which explains how to set this up... you can download it here:
> http://www.inqu.net/Smarthost.zip
>
> [Check the How do I set this up / Smarthost for specific domains section]
>
>

Darwood
Thu Jan 29 11:37:42 CST 2004

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:uy6qDUo5DHA.564@TK2MSFTNGP10.phx.gbl...
> I think that doing that even stop internal NDRs... so be careful.
>


You mean from an internal user to an internal user?

--
Darwood MCSE

Remove nospamme from email address to reply.

Javier
Thu Jan 29 12:35:04 CST 2004

> You mean from an internal user to an internal user?

Those too... but I was referring if you send something to another domain and
the other domain doesn't exist (or because you mispell it) your Exchange box
cannot contact the other domain and the NDR is not produced (so you never
know what happened).

I'm not 100% sure about this (I don't disable NDRs)... but I recall reading
that on a thread by Chad and Les (I think) a couple of days go.

--
Javier [SBS MVP]

<< SBS ROCK!!! >>

Robert
Thu Jan 29 14:39:20 CST 2004

Anyone know how to modify the NDR messages or do Inbound Recipient filtering
on Exchange 2000?

Robert

"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:O6cV65k5DHA.2560@TK2MSFTNGP09.phx.gbl...
> Could everybody please turn off their autoreply on their virus scanner. It
> is totally getting on my nerves. I am not receiving any actual viruses
just
> tonnes of notifications from postmasters about a virus I do not have. This
> virus is obviously spoofing the source email address and autoreply is
> possibly unwittingly contributing to the spread of the virus. When you
reply
> to a system that might not have been infected with the original infected
> message you risk infecting a new system. Unless your antivirus software is
> clever enough to know the real source please do me a favour and turn it
off.
>
> --
> Darwood MCSE
>
> Remove nospamme from email address to reply.
>
>

Javier
Thu Jan 29 17:44:37 CST 2004

Thanks to both!

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:Ok7KFlo5DHA.2732@TK2MSFTNGP09.phx.gbl...
> Excellent document Javier.
>
> --
> Darwood MCSE
>
> Remove nospamme from email address to reply.
>
> "Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
> message news:eK82qNo5DHA.2720@TK2MSFTNGP09.phx.gbl...
> > Hi David!
> >
> > You can use a Smarthost only for that ISP. I'm preparing a small
document
> > which explains how to set this up... you can download it here:
> > http://www.inqu.net/Smarthost.zip
> >
> > [Check the How do I set this up / Smarthost for specific domains
section]
> >
> >
>
>

billyw
Thu Jan 29 18:17:22 CST 2004

have a customer with similiar issue..
all the tests say they aren't an open relay and settings say they aren't but
looks like spamcop have them down as such.
i did turn off the NDR's as they were mounting up to daft amounts.


"Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
news:uW7qrOo5DHA.2136@TK2MSFTNGP12.phx.gbl...
> Sounds like your customer could have been blacklisted as an open relay.
>
> --
> Darwood MCSE
>
> Remove nospamme from email address to reply.
>
> "David Elders" <david.elders@akdsystems.co.uk> wrote in message
> news:eJHpBIo5DHA.2480@TK2MSFTNGP10.phx.gbl...
> > Hi all,
> >
> > Here's one for all you new [and old] MVPs! We all love you and we hope
you
> > all know!
> >
> > SBS2k set-up to add disclaimers to outgoing mail as per
smallbizserver.net
> > instructions - working fine. We have a single customer who we are having
> > problems sending email to - error message we get is:
> >
> > You do not have permission to send to this recipient. For assistance,
> > contact your system administrator.
> > <OurServer#5.7.1 smtp;501 5.7.1 <sender's email address>... Sender
refused
> > by the DNSBL - MAIL REJECTED - DYNAMIC IP RANGE - RELAY VIA YOUR
PROVIDER
> > (SORBSDUL)>
> >
> > Now we have a cable modem set-up with dynamic [although constantly
> updating]
> > IP address. In effect it's static although not guaranteed as such. Our
> > outgoing email is sent via DNS through Exchange 2k. We're happy with
that
> > but what I want to find out is if it is possible for us to send outgoing
> > emails to this particular recipient's domain via our ISPs mail servers
> > rather than via DNS, but only for them.
> >
> > Had a dig around and [probably because its been a long - and not good! -
> day
> > thus far] haven't managed to figure it out - would I be right in
assuming
> > we'd have to configure a smart host of some kind?
> >
> > Regards,
> >
> >
> >
> > David
> >
>
>
>
>

Darwood
Fri Jan 30 02:58:42 CST 2004

GFI MailEssentials can blacklist an internal address so it deletes the mail
before you see it but you if it is against novarg you will be chasing your
tail as the name prefix before the domain seems to be different all the
time.

--
Darwood MCSE

Remove nospamme from email address to reply.

"Robert" <bob@bob.net> wrote in message
news:uMcqkhq5DHA.1504@TK2MSFTNGP12.phx.gbl...
> Anyone know how to modify the NDR messages or do Inbound Recipient
filtering
> on Exchange 2000?
>
> Robert
>
> "Darwood" <darrenw@nospamme.woodfordcomputers.co.uk> wrote in message
> news:O6cV65k5DHA.2560@TK2MSFTNGP09.phx.gbl...
> > Could everybody please turn off their autoreply on their virus scanner.
It
> > is totally getting on my nerves. I am not receiving any actual viruses
> just
> > tonnes of notifications from postmasters about a virus I do not have.
This
> > virus is obviously spoofing the source email address and autoreply is
> > possibly unwittingly contributing to the spread of the virus. When you
> reply
> > to a system that might not have been infected with the original infected
> > message you risk infecting a new system. Unless your antivirus software
is
> > clever enough to know the real source please do me a favour and turn it
> off.
> >
> > --
> > Darwood MCSE
> >
> > Remove nospamme from email address to reply.
> >
> >
>
>

pieman
Sat Jan 31 10:56:07 CST 2004

Why are these auto virus replies inteligent? If they knew which viruses used spoofed addresses and didn't reply to those then people wouldn't have to worry about turning them off. I mean it is not as if this is a sudden thing, it must be at least two years since a major virus used the proper email address of the infected person....