RE: Flood of "System Administrator" Undeliverable SPAM, please help
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: Flood of "System Administrator" Undeliver... - 15.Apr.2008 9:01:47 AM
|
|
|
wrabbit
Posts: 13
Joined: 18.Aug.2006
Status: offline
|
This is really timely as the situation was getting so bad at one client's they were prepared to move to another solution to stop these mails. Look forward to playing with the patch.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 15.Apr.2008 9:11:04 AM
|
|
|
davenportkurt
Posts: 12
Joined: 1.Apr.2008
Status: offline
|
Can you give us a brief explanation on how the patch will be 'rolled' out?
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 15.Apr.2008 11:53:59 AM
|
|
|
LukeQuake
Posts: 20
Joined: 18.Mar.2008
Status: offline
|
Great News - Thanks for the Update!
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 15.Apr.2008 3:39:41 PM
|
|
|
charlesw
Posts: 2
Joined: 31.Jan.2008
Status: offline
|
At this point I would even consider applying a beta of the patch to the system. Blocking all NDRs is not an option, even temporarily. Yes, I performed the registry edit and added the blacklist.
My senior management team is getting hammered, some are receiving 5-6 messages per minute in bursts throughout the day - generally adding up to 200-400 for each affected user in a 24-hour period.
These guys aren't going to want to wait a week for resolution, and are more likely to throw money at the problem and force IT to replace the filters entirely. Needless to say, I would much rather continue using the GFI software.
Is there any possibility for a short-term solution?
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 16.Apr.2008 2:23:52 AM
|
|
|
ekpr
Posts: 25
Joined: 28.Jun.2007
Status: offline
|
Same problem here. Some people receive 400 messages a day and they are not very happy with this. Hope this will be solved soon.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 16.Apr.2008 8:17:54 AM
|
|
|
Eric
Posts: 17
Joined: 24.Jul.2007
Status: offline
|
ips.backscatterer.org failed for me also, but when I entered ips.backscatter.org it works. It sorts ALOT of messages too, but I disabled it because I didn't know the source. Anybody have any ideas?
Eric
quote:
ORIGINAL: SMHCO
When I add ips.backscatterer.org to DNS Blacklists it fails the DNS test.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 16.Apr.2008 10:00:58 AM
|
|
|
pcecom
Posts: 16
Joined: 14.Apr.2005
Status: offline
|
I added ips.backscatter.org and found it was filtering too much legitimate email. I removed it.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 16.Apr.2008 2:59:39 PM
|
|
|
joep
Posts: 18
Joined: 14.Dec.2007
Status: offline
|
quote:
pcecom
I added ips.backscatter.org and found it was filtering too much legitimate email. I removed it.
+1 I had the same issue as well. Too much good mail being caught.
_____________________________
Joseph Pflum
Kenton County Network Admin
303 Court Street
Covington, Ky 41011
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 16.Apr.2008 6:46:57 PM
|
|
|
dima
Posts: 38
Joined: 10.Feb.2006
Status: offline
|
quote:
My senior management team is getting hammered, some are receiving 5-6 messages per minute in bursts throughout the day - generally adding up to 200-400 for each affected user in a 24-hour period.
These guys aren't going to want to wait a week for resolution, and are more likely to throw money at the problem and force IT to replace the filters entirely. Needless to say, I would much rather continue using the GFI software.
Is there any possibility for a short-term solution?
Absolutely agreed. Exactly the same situation here; we're on the brink of switching spam filter solutions, simply because GFI is not working for this particular attack.
5-6 per minute? Ours are coming in at bursts of around a hundred so per minute... Needless to say, we need a fix NOW.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 18.Apr.2008 9:30:10 AM
|
|
|
unisold
Posts: 1
Joined: 18.Apr.2008
Status: offline
|
this is happening to us as well now. every single day. we added "Undeliverable:" and "Undelivered Mail" keywords but to no avail. we cannot disable legit NDR's so we really need a fix/update/patch. We are already being required to look into other companies anti-spam products for solutions.
Any further information on ETA - I do not think we can go much longer like this.
Rgds
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 8:58:09 AM
|
|
|
markrees
Posts: 26
Joined: 9.Feb.2005
Status: offline
|
we're still getting a lot of these. i have to say it's getting to the stage where we'll be looking at other anti-spam packages - there are plenty I'm sure.
gfi really need to show what they're made of here and need to get a patch out asap.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 1:03:11 PM
|
|
|
Nicks
Posts: 2582
Joined: 17.Mar.2003
Status: offline
|
Hi,
GFI has released a patch which targets the blocking of NDR Spam emails. After installing the patch, GFI MailEssentials will start scanning the emails attached to non-delivery reports using the following anti-spam modules.
- Bayesian Filter
- DNS Blacklists
- Sender URI RealTime Blocklists
- Keyword Checking
The emails attached to non-delivery reports in NDR spam would be the original email from the spammer, and would therefore contain enough data for GFI MailEssentials to block the message.
This patch can be installed on GFI MailEssentials 12 build 20080326 and can be downloaded from http://ftp.gfisoftware.com/patches/ME12/20080326/ME12_PATCH_20080421_01.zip.
Installation instructions can be found in readme.txt included in the zip.
_____________________________
Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 2:35:54 PM
|
|
|
FresnoDoug
Posts: 34
Joined: 28.Nov.2007
Status: offline
|
That is GREAT news...we'll install ASAP & let you know how it works for us.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 2:41:56 PM
|
|
|
FresnoDoug
Posts: 34
Joined: 28.Nov.2007
Status: offline
|
First question -- how do I determine which build is installed? Help-->About in the GFI Configuration program just says "Version 12.0"
The batch requires build 20080326.
|
|
|
|
|
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 2:50:21 PM
|
|
|
FresnoDoug
Posts: 34
Joined: 28.Nov.2007
Status: offline
|
Oops I meant "patch" not "batch"
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
