Hello, I have a problem with an user: he’s attacked by a NDR spam and he’s receiving a lot of junk mail delivery message.
I have tried to add some rule on him mail db but the rule are not working.
How can I block this message?
I have tried to add a rule to delete with this paremter:
subject: “DELIVERY FAILURE”
from: “Mail Delivery Subsystem” or “MAILER-DAEMON”
but even if the mail have this subject they are not deleted.
How can I add a rule to correctly delete this message?
Thanks
Subject: Help with rule
Good Morning,
You can use any of the spam filtering applications like SEP, Brightmail appliance or any third party tool.
Subject: Help with rule
Good luck! We had this problem and still see it occasionally, but our spam filtering provider (Postini) does a decent job of blocking many of these.
Because it is a Mail Router issue, I don’t know that there is a way to block it. I know the cause…Someone is using one of your user’s e-mail addresses as the FROM in their SPAM. When a receiving address is invalid or not accepted by the recipient system, you get the Mailer-Daemon / NDR report back to the compromised user’s email address.
We, too, tried everything we could to prevent delivery of these. In the end, the only thing that worked successfully was the [DEL] key on the keyboard!
Brian