[quoted text, click to view]

No, specifically you need to stop accepting messages for unknown
recipients. There should be no way of forcing your machine to
originate NDRs to remote domains.

What version of IIS are you running?

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.

[quoted text, click to view]

I recommend Vamsoft's ORF (www.vamsoft.com), which among many
anti-spam functions enables IIS SMTP to reject unknown recipients.

N.B. I have previously published a free IIS add-on that performs the
same function, but it is currently undergoing revision due to possible
compatibility issues that have cropped up since its 2005 release. Your
situation calls for a prompt deployment of field-tested technology.

--Sandy



------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.