Re: [cobalt-users] Trash mails to nonexistent users?

["VFastlink Support Team" <support@xxxxxxxxxxxxx>]

Dan,

The mail is being accepted for delivery as if it were a valid user.  In
other words, the server thinks this came from a valid user and therefore
tries to send on the mail (relay).  We see this with customers that have a
static or semi-static IP address, mainly businesses with large internal
networks.  A valid user authenticates through the server creating a valid IP
for realying (popauth).  Then, anyone from that IP can send for however wide
the POPAuth window is set for.  Usually the customer has a virus or hacked
computer that is acting as a SPAMbot.

Unfortunately, because they trash the header and it all comes from the same
IP, it's hard to track down where it originated from.

The mail is destined for a non-existant domain.  It sits on the server as
the server tries to send and re-send the same junk email over and over.
Worse yet is when it is a valid domain name and the "reply to" is someone on
your server.  Then that person receives all the responses, bounces and angry
replies.


----- Original Message ----- 
From: "Dan Kriwitsky" <list3@xxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, February 12, 2004 11:19 AM
Subject: RE: [cobalt-users] Trash mails to nonexistent users?


> > Is there a way to delete mails sent to non-existent users?
> >
> > I'm a relative newbie, so bear with me. Can't seem to find
> > anything in the archives, but maybe I'm using the wrong keywords.
> >
> > Lots of emails coming in to non-existent users lately. The
> > server attempts to reply with a "non-existent user" response,
> > finds that the sender is also non-existent, because, of
> > course, it's spam. The server then sends the postmaster a
> > "Postmaster notify" message. Even worse is when the sender's
> > entire domain doesn't exist, in which case the message stays
> > around, the mailer tries to repeatedly send the "non-existent
> > user" response for five days. Then finally sends a
> > "Postmaster notify" message.
> >
> > So is there a way to just immediately throw away any messages
> > to non-existent users on the server?
>
> Is this a RaQ? If so, "No such user" messages happen during the SMTP and
> there is no email on your system. I can't think of any way what you're
> describing could be generated by your RaQ.
> -- 
> C2003 Dan Kriwitsky
> 
> Please reply to the list only. Off list replies are not read.
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>