GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Stopping the NDR

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Stopping the NDR Page: [1]
Login
Message << Older Topic   Newer Topic >>
Stopping the NDR - 3.Sep.2008 8:52:17 AM   
CELCAT

 

Posts: 2
Joined: 3.Sep.2008
Status: offline
Hello all,

Over the past few days I've been getting hammered by NDR emails. Example below :

This is a warning message only.
Your message remains in the server queue,
the server will try to send it again.
You should not try to resend your message now.


Message delivery to 'slazosena@volsk.san.ru' delayed SMTP module(domain volsk.san.ru) reports:
ns.volsk.san.ru: no response

Reporting-MTA: dns; san.ru

Original-Recipient: rfc822;<slazosena@volsk.san.ru>
Final-Recipient: rfc822;<slazosena@volsk.san.ru>
Action: delayed
Status: 4.0.0

Received: from pmsn.94.50.189.90.sable.dsl.krasnet.ru ([90.189.50.94] verified)
by san.ru (CommuniGate Pro SMTP 5.2.5)
with ESMTP id 40277963 for slazosena@volsk.san.ru; Tue, 02 Sep 2008 19:30:54 +0400
Message-ID: <000701c90d10$019fdd6b$49d6c085@bqwhqcmh>
From: =?koi8-r?B?7fXs+PTp9+n64dA=?= <info@celcat.com>
To: <slazosena@volsk.san.ru>
Subject: =?koi8-r?B?LT3hfvp+6X7xLT3Myw==?=
Date: Tue, 02 Sep 2008 13:42:58 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0002_01C90D10.019B75C3"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300

I'm using version 12 on build 20080623. I get the following in my ase_action gfi_log.txt file for the spam email with message id receipt-40413379@san.ru

2008-09-02,19:48:58,284,3,"#000006f0","#000009d0","info ","ME_ASE_ACTION","MessageID: [<receipt-40413379@san.ru>]; Action: NONE"

I'm using the following DNS Blacklists

cblless.anti-spam.org.cn
multi.surbl.org
sbl-xbl.spamhaus.org
bl.spamcop.net

Any ideas would be greatfully recieved.



Chris
Post #: 1
RE: Stopping the NDR - 3.Sep.2008 9:21:20 AM   
RSP

 

Posts: 450
Joined: 31.Oct.2006
From: UK
Status: offline
KBID003322 has a lot of information on this.

(in reply to CELCAT)
Post #: 2
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Stopping the NDR Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software