How To Disable DSN Success Messages
(Doc ID 1950051.1)
Last updated on NOVEMBER 19, 2018
Applies to:Oracle Communications Messaging Server - Version 7.0.4 and later
Information in this document applies to any platform.
Spammers are creating large scale joe-job attacks by specifying an e-mail address for DSN-Success messages that does not belong to them. Spammer sends message to legit user and it gets through all filtering and is delivered. Spammer has set DSN-Notify for successful delivery to go to a third party, effectively joe-jobbing that third party with excessive amount of DSN-Notify success messages ...
So we want to stop that. I understand the NOTARY mechanism can't be completely turned off ... so what can we do? Maybe discard all DSN-Notify success messages at the outbound MTAs?
Also, could you give me a pointer on how we would implement the rejection just for unauthenticated senders?
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document