Question : Email Domain Spoof , getting lot of NDR

I am using exchange 2003 server and on another box i have symantec brightmail 6.0

Recently i been getting a lot of spoofed NDR from other servers , i think someone grab my domain and send out massive spam emails.
How do i solve this?

Currently my symantec bright 6.0 directory harvesting is not working and i never use any of the exchange anti spam features because all mails
will go thru my brightmail spam filter first

Answer : Email Domain Spoof , getting lot of NDR

Hi,

I had same problem problem and even i had same Symantec brightmail 6.x with Exchange 2003 before. Our users used to recieve lot of NDR messge even though they didnt send any such emails to those senders.

This can be solved only by using the method called BATV (Bounce address tag verification) but this method is not available in the Symantec Brightmail. so, I have switched (not only for this reason and i hate the brightmail since it hangs most of times espeically on the week-ends due to huge spam emails) from Brightmail to Ironport appliance who they provide this BATV functions and currently i am not getting even one spoof NDR message.

If you want to know about the BATV function and how it works, google it.