On Wed, 7 Nov 2001 sherona@??? wrote:
> Hi
>
> I am probably deleting the bounce.
> I'm not sure how to delete the original message or how to find it.
>
> I can't tell them to stop sending since its from user unknown.
> The FROM address is "<>" so what I think is happening is that the
> message is sent from the mail server to the relevant server, but the
> user does not exist so message is sent back to mail server, but
> without a from address the message can't be sent bak to original
> sender so its sent back to the server where the user does not exist
> hence the loop.
Nono, thats the bounce. Bounces are specifically sent with the null
sender ( <> ) to prevent loops. (Eg, you cant send a bounce for a
bounce).
However, any useful bounce should include the headers of the message
that caused the bounce, allowing you some chance of tracking it down.
/path/to/exim -Mvb <message-id of the bounce message> should allow you
to inspect the content of the bounce message.
> I was hoping to write a filter to either kill all mail with the FROM
> address "<>" or recipient being tanjas20@???.
> otor anything to stop it before my server crashes.
Generally if a bounce is not deliverable, and you can't troubleshoot and
correct the original problem, the only thing left to do is just throw it
on the floor. Check out the ignore_errmsg_errors and
ignore_errmsg_errors_after options.
Also, if gauss.cam.wits.ac.za is a local domain, check into the
receiver_verify option, which might help to prevent your accepting any
messages from tanjas20@??? if that is not a currently
valid address.
It is _also_ possible, that the messages are spams. It isnt VERY common
for spammers to use the null sender, but occasionally someone gets the
bright idea to do so. Inspecting the content of the message should make
it obvious if it is a spam. If its a spam, its possible that they are
all originating from the same IP address. I would simply block that IP
and/or use appropriate tools to determine the responsible netadmin for
that IP block and make a complaint/report.
> On 6 Nov 2001, at 9:26, Dave C. wrote:
>
> >
> > Who is sending the message? Tell them to stop?
> >
> > Are you sure you are removing the message that is bouncing, and not just
> > the message that is the bounce?
> >
> > On Tue, 6 Nov 2001 sherona@??? wrote:
> >
> > > Hi
> > >
> > > I am currently running exim3.22 on Solaris2.8.
> > > I have a mail message that keeps bouncing and filling up the mail
> > > server.
> > > I have tried removing the the message from the queue but that
> > > doesn't help, it just keeps coming back.
> > >
> > > The error message I get when trying to deliver the message is :
> > > " SMTP error from remote mailer after RCPT
> > > TO:<tanjas20@???>:
> > > host gauss.cam.wits.ac.za [146.141.21.250]: 550 Address not known at this site."
> > >
> > > The server gauss.cam.wits.ac.za is a valid mail server, but the id tanjas20 does not
> > > exist on that server which is what is probably causing the message to bounce.
> > >
> > > Is there any way to stop it .
> > > Is there a filter I could possibly write.
> > >
> > > Any help would be greatly appreciated.
> > > Thanks
> > > Cheers
> > > sherona
> > >
> > > --
> > >
> > > ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.e
> xim.org/ ##
> > >
> > >
> >
> > --
> >
> >
> >
> > --
> >
> > ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exi
> m.org/ ##
> >
>
>
>
--
