Unsolved Bad Addresses
-
Since our email virus escapade a few weeks ago, we have tightened up security on our Exchange Online server. Now, I am getting reports from my Exchange Online server of emails that are coming in attempting to reach employee's email addresses that are no longer with the company.
I was going to create a transport rule that would take email addresses that no longer belongs in our AD, but are in a list, and have them deleted upon receipt. But, Exchange Online only allows for those that are within AD to be in the filter.
Is there another method of filtering out recipient email addresses that are no longer within AD?
-
@nerdydad said in Bad Addresses:
Since our email virus escapade a few weeks ago, we have tightened up security on our Exchange Online server. Now, I am getting reports from my Exchange Online server of emails that are coming in attempting to reach employee's email addresses that are no longer with the company.
I was going to create a transport rule that would take email addresses that no longer belongs in our AD, but are in a list, and have them deleted upon receipt. But, Exchange Online only allows for those that are within AD to be in the filter.
Is there another method of filtering out recipient email addresses that are no longer within AD?
Aren't the email addresses bounced though?
-
Right. Why aren't the accounts disabled/deleted?
-
Correct. These accounts are deleted.
-
Dont you get hundreds of invalid address email submissions a day? like a ton of emails to addresses that dont exist.
Do you read these reports?theceo@yourcompany.com
customerservice@yourcompany.com
customer.services@yourcompany.com
sales@yourcompany.com
john.smith@yourcompany.com
exemployee@yourcompany.comJust delete these. I think there is an option to drop or delete all emails for people who dont exist in the directory(rather than return NDR to sender), at least on premise Exchange has this.
-
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDRs?
-
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
-
I think what they are implying above is that emails sent to non-existent address/account should be dropped rather than generating a non-delivery receipt/response to the sender.
There's a pros and cons in the implementation. Ofcourse, it would be nice if the sender will be receiving a response that the mailbox is non-existent on the email server (being courteous). It might totally be non-existent or entered incorrectly, however, it will also get the idea that the domain exist, and that the sender with malicious intention will try to guess another recipient (instead of waiting forever for a response). Especially true for those with companies using generic addresses like cio, coo, sales01, sales02, etc.
-
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
-
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
-
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
If you are going to delete them at the server, best to not get them at all.
-
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
I am missing something here, usually if you have old email addresses deleted they don't get sent to you they get bounced back to the sender. What am I missing?
-
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
I am missing something here, usually if you have old email addresses deleted they don't get sent to you they get bounced back to the sender. What am I missing?
From what I can tell, these are newsletters from automated systems. Some were internal and the senders lists from those systems have been resolved. The emails that we are getting now are like alerts from facebook or other alerts that we have no care for and the person that was receiving them hasn't been here for a couple of years at least.
-
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
I am missing something here, usually if you have old email addresses deleted they don't get sent to you they get bounced back to the sender. What am I missing?
From what I can tell, these are newsletters from automated systems. Some were internal and the senders lists from those systems have been resolved. The emails that we are getting now are like alerts from facebook or other alerts that we have no care for and the person that was receiving them hasn't been here for a couple of years at least.
But why are you getting them? We are still missing the basics. If a person left and their email is gone, you would not get an email from any system about them getting sent things.
-
I guess the real question is... why did you tighten security to a point that you are unhappy with the results? It's not "security" to send you all these useless emails. So just undo that requirement.
-
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
@dbeato said in Bad Addresses:
@nerdydad said in Bad Addresses:
Correct. These accounts are deleted.
So you don't want to have NDR access?
Huh? Please educate me. I don't understand.
I edited, bad writing on Iphone but my question was, so you don't want any NDR messages sent back?
I really don't care, they get moved to my junk email folder and will be deleted within 30 days. My boss gets them too and was wondering if there was a way to manage them, such as deletion at the server.
I am missing something here, usually if you have old email addresses deleted they don't get sent to you they get bounced back to the sender. What am I missing?
From what I can tell, these are newsletters from automated systems. Some were internal and the senders lists from those systems have been resolved. The emails that we are getting now are like alerts from facebook or other alerts that we have no care for and the person that was receiving them hasn't been here for a couple of years at least.
So you have active aliases or fowarding for them so you get them? Otherwise if there are gone they will not even get to anyone.
-
@scottalanmiller said in Bad Addresses:
I guess the real question is... why did you tighten security to a point that you are unhappy with the results? It's not "security" to send you all these useless emails. So just undo that requirement.
That's probably going to be the plan. Boss tightened up security. I'll investigate to see about turning that one off.
-
@nerdydad said in Bad Addresses:
@scottalanmiller said in Bad Addresses:
I guess the real question is... why did you tighten security to a point that you are unhappy with the results? It's not "security" to send you all these useless emails. So just undo that requirement.
That's probably going to be the plan. Boss tightened up security. I'll investigate to see about turning that one off.
That specific one isn't security related. If anything, spamming you with garbage will cause you to ignore real problems.
-
FFS @NerdyDad answer the damned question
How are you getting email for accounts that do not exist.
This is not possible and not something that you can get from a security setting.
You are spinning in fucking circles here because you have not answered a basic question.
-
