Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Problem with NDR’s getting filtered
  FAQ FAQ  Forum Search   Register Register  Login Login

Problem with NDR’s getting filtered

 Post Reply Post Reply
Author
brekkjen View Drop Down
Newbie
Newbie
Avatar

Joined: 23 February 2005
Location: Norway
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote brekkjen Quote  Post ReplyReply Direct Link To This Post Topic: Problem with NDR’s getting filtered
    Posted: 25 May 2005 at 7:49am

I have Reject if empty "Mail from" turned on in my filter. This is also filtering NDR's from Exchange servers even if they are sent with a valid from e-mail.

Log entry:

05.25.05 13:35:45:582 -- (16216) Connection from: 212.62.254.220 - Originating country : Norway
05.25.05 13:35:45:883 -- (16216) Resolving 212.62.254.220 - box254220.sdsl.no
05.25.05 13:35:45:883 -- (16216) - Empty Mail From -
05.25.05 13:35:45:883 -- (16216) 212.62.254.220 - Mail from: To:me@mydomain.com will be rejected
05.25.05 13:35:46:103 -- (16216) EMail from to me@mydomain.com was received and quarantined. Size: 3 KB, 3072 bytes
05.25.05 13:35:46:123 -- (16152) Time to add Msg to Bayes corpus:0
05.25.05 13:35:46:153 -- (16216) Disconnect

 

Mail header from quarantined mail:

Received: from 212.62.254.220 by mx01.nordtek.no (LogSat Software SMTP Server) Wed, 25 May 2005 13:35:45 +0200
From: postmaster@sendingdomain.com
To: me@mydomain.com
Date: Wed, 25 May 2005 13:36:30 +0200
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="9B095B5ADSN=_01C5603D462F78F8000002E7chivas.stryn .Ves"
X-DSNContext: 335a7efd - 4458 - 00000001 - 80040546
Message-ID: <DWMviC7hN00000063@chivas.stryn.Vest-busscar.dk>
Subject: Delivery Status Notification (Failure)
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <>

This situation occures with at least two different Exchange serveres, one 2000 and one 2003.

Any suggestions?

Best regards,
Leif Arne Brekke

 

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 25 May 2005 at 1:14pm

brekkjen,

You will not like my answer ... If you are an ISP, turn the blank mail from blocking off.  Technically, mail servers must respond to, and deliver messages with no from.

If you are running a server for either yourself, or other corporations that clearly understand the ramifications of "Empty Mail From" blocking, keep in blocking and live with the results.

Now, having said that, we are an ISP and we allow blank senders.  HOWEVER, most of these messages end up getting blocked for some other reason it they really are SPAM.  Often, NDRs that really are not SPAM, get blocked by our filters because the connecting source has other problems like not rDNS or whatever.  We live with the few remaining blank senders that get through.

Regards,

The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
brekkjen View Drop Down
Newbie
Newbie
Avatar

Joined: 23 February 2005
Location: Norway
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote brekkjen Quote  Post ReplyReply Direct Link To This Post Posted: 26 May 2005 at 3:03am

Thanks for the answer Dan.
I suspected somthing like that and have now turned off blank mail blocking and we will see what happens.

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.203 seconds.