How To Disable DSN Success Messages
(Doc ID 1950051.1)
Last updated on SEPTEMBER 27, 2023
Applies to:
Oracle Communications Messaging Server - Version 7.0.4 and laterInformation in this document applies to any platform.
Goal
Spammers are creating large scale joe-job attacks by specifying an e-mail address for DSN-Success messages that does not belong to them. Spammer sends message to legit user and it gets through all filtering and is delivered. Spammer has set DSN-Notify for successful delivery to go to a third party, effectively joe-jobbing that third party with excessive amount of DSN-Notify success messages ...
So we want to stop that. I understand the NOTARY mechanism can't be completely turned off ... so what can we do? Maybe discard all DSN-Notify success messages at the outbound MTAs?
Also, could you give me a pointer on how we would implement the rejection just for unauthenticated senders?
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Goal |
Solution |
References |