Print Page | Close Window

Problem with NDR’s getting filtered

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5193
Printed Date: 12 March 2025 at 7:18am


Topic: Problem with NDR’s getting filtered
Posted By: brekkjen
Subject: Problem with NDR’s getting filtered
Date Posted: 25 May 2005 at 7:49am

I have Reject if empty "Mail from" turned on in my filter. This is also filtering NDR's from Exchange servers even if they are sent with a valid from e-mail.

Log entry:

05.25.05 13:35:45:582 -- (16216) Connection from: 212.62.254.220 - Originating country : Norway
05.25.05 13:35:45:883 -- (16216) Resolving 212.62.254.220 - box254220.sdsl.no
05.25.05 13:35:45:883 -- (16216) - Empty Mail From -
05.25.05 13:35:45:883 -- (16216) 212.62.254.220 - Mail from: To:me@mydomain.com will be rejected
05.25.05 13:35:46:103 -- (16216) EMail from to mailto:me@mydomain.com - me@mydomain.com was received and quarantined. Size: 3 KB, 3072 bytes
05.25.05 13:35:46:123 -- (16152) Time to add Msg to Bayes corpus:0
05.25.05 13:35:46:153 -- (16216) Disconnect

 

Mail header from quarantined mail:

Received: from 212.62.254.220 by mx01.nordtek.no (LogSat Software SMTP Server) Wed, 25 May 2005 13:35:45 +0200
From: mailto:postmaster@sendingdomain.com - postmaster@sendingdomain.com
To: mailto:me@mydomain.com - me@mydomain.com
Date: Wed, 25 May 2005 13:36:30 +0200
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="9B095B5ADSN=_01C5603D462F78F8000002E7chivas.stryn .Ves"
X-DSNContext: 335a7efd - 4458 - 00000001 - 80040546
Message-ID: <DWMviC7hN00000063@chivas.stryn.Vest-busscar.dk>
Subject: Delivery Status Notification (Failure)
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <>

This situation occures with at least two different Exchange serveres, one 2000 and one 2003.

Any suggestions?

Best regards,
Leif Arne Brekke

 


Replies:
Posted By: Desperado
Date Posted: 25 May 2005 at 1:14pm

brekkjen,

You will not like my answer ... If you are an ISP, turn the blank mail from blocking off.  Technically, mail servers must respond to, and deliver messages with no from.

If you are running a server for either yourself, or other corporations that clearly understand the ramifications of "Empty Mail From" blocking, keep in blocking and live with the results.

Now, having said that, we are an ISP and we allow blank senders.  HOWEVER, most of these messages end up getting blocked for some other reason it they really are SPAM.  Often, NDRs that really are not SPAM, get blocked by our filters because the connecting source has other problems like not rDNS or whatever.  We live with the few remaining blank senders that get through.

Regards,



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: brekkjen
Date Posted: 26 May 2005 at 3:03am

Thanks for the answer Dan.
I suspected somthing like that and have now turned off blank mail blocking and we will see what happens.


Print Page | Close Window