RE: Block notification / bounce mails (as in DDOS)

["Jos Osborne" <Jos () meltemi co uk>]

Had a similar situation here - didn't know there was a problem till the exchange server crashed because the dear user 
didn't think to tell me she had about 3500+ spam mails in her deleted items...

Fortunately, all the e-mails came from the same person, so I was able to tell Exchange Server to simply not accept any 
e-mails from that address.
Don't know about if they were all coming from different places though. It might be possible to filter out all mails 
with "Undeliverable Mail" in the header, but the overheads might be crippling.

Jos

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html