Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Bounced messages to list problem
  FAQ FAQ  Forum Search   Register Register  Login Login

Bounced messages to list problem

 Post Reply Post Reply
Author
ed NL View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote ed NL Quote  Post ReplyReply Direct Link To This Post Topic: Bounced messages to list problem
    Posted: 03 December 2004 at 4:46am

Today we experienced the following problem. a mailadress in a list was wrong and generated a error from a receiving server. The error was send to the list and of course again to the wrong mailadres. Result a new error and this resulted in a loop. mail>list>error>list>error>and so on...

After several hunderd (rather large)  errormails the mailboxes were flooded and people started to call the helpdesk. We stopped the list, corrected the wrong mailadres and the problem was solved.

I am not sure if the logsat filter should have intervened, but it definitly would be a nice feature if it did.

any thoughts?

 

Back to Top
bpogue99 View Drop Down
Groupie
Groupie


Joined: 26 January 2005
Status: Offline
Points: 59
Post Options Post Options   Thanks (0) Thanks(0)   Quote bpogue99 Quote  Post ReplyReply Direct Link To This Post Posted: 03 December 2004 at 10:38am

It should be easy enough to detect mail loops, but perhaps Logsat can add an option for "max mail hops" ... generally, most destinations should be 1 hop away, 2-5 normal, 6+ might be on the high side. I haven't reviewed the headers of most email enough to know what is or is not normal so those numbers might be off a little, but it's just an idea that might be able to help with detecting mail loops, and preventing those spam messages that are routed and routed and routed to hide the originator. 

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 05 December 2004 at 5:02pm
Ed,

SpamFilter has some loop detection functionality in that it will stop accepting emails if they contain more than 100 "Received:" headers. I'm not sure if this would have applied in your case though.

Roberto F. LogSat Software
Back to Top
ed nl View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote ed nl Quote  Post ReplyReply Direct Link To This Post Posted: 20 December 2004 at 8:58am

No, not really i guess.

Every error is in fact a "new" mail so for spamfilter nothing special.

But is there a possibility for logsat to deny the same mails if they are the same:.. content, from, server and so on...???

Receiving several hunderd exacly the same mails should ring some bells...

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 20 December 2004 at 10:35pm
It's not that simple... To implement what you ask, the content of any email that comes in would have to be stored so that new mails can be compared against it to see if they are the same. Any new email would have to be compared with possibly several thousands of emails to see if theu are repeats, and that would take a huge impact on performance.

The real solution to avoid this and any future problems is to configure any autoresponder with a null mail from address so that this will prevent bounce messages to be created and prevent loops.

Roberto F. LogSat Software
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.063 seconds.