Stripping original message content from NDR's

[richardacarey]

Hello,

I was wondering if there was a way to configure IronPort to strip message content from bounced emails.

For instance:

From:johndoe@companyx.com

To:janesmith@companyz.com

##Potentially sensitive information ##


NDR:

from:mailerdaemon@ironportserver.com..

to:johndoe@companyx.com..

delivery failure...etc.

##no original message attached##



Any help would be greatly appreciated. Thanks.

[meyd45_ironport]

You can set how much of the original message is included in any bounce. The default is 10k. This may be adjusted under bounceconfig > edit > 1 ...lots of questions...
Please enter the maximum size of the original message (in bytes) to include in the bounced notification message.
[10240]>

J.

[steven_geerts]

Hi,

Good question!
Who is actually generating the bounce? Is that your Ironport or some downstream system?

I think the solution provided by meyd45 is probably working when the Ironport system is generating the bounces.
If Exchange is generating the bounces, the original message becomes an attachment. You can conduct some nice message filter that can detect those bounces (probably not too hard) and then strip off all attachments.

Steven

[richardacarey]

Thanks. That's a good point about Exchange bounces. I've got the bounceconfig settings correct. I'll play around with a message filter for the Exchange bounces.