BATV, Recipient address rejected

[Aleksandar Devecerski]

Hello everyone
We are in the process of evaluating Email Security.cloud and things are pretty much running as expected, no (major) issues. I was a little surprised with 3 day maintenance period over the weekend, but nothing was affected by it.

One thing though. We are using on-premise MDaemon email server with Backscatter protection feature turned on. Common name for it is BATV (Bounce Address Tag Validation) and the most obvious thing about it is that it adds verification tag to the email address looking something like prvs=12908dd3d3=[e-mail]. Recipient server after verification strips the tag and recipient sees usual [e-mail]. But in some cases recipient server responds to BATV address directly (auto-responses, mailing lists,...) and SES.cloud's Address Registratio feature rejects it.

Security Scan: Address Registration Service 
Action: Blocked
Reason: Invalid recipient <prvs=12908dd3d3=[e-mail]> (#5.1.1)

I cannot register addresses like this, because BATV tag varies over time. Also registering prvs*@mydomain.com is not working.
Found thread here on the Forum, from 2021, addressing this very issue SMG 10.6.6 BATV Tags from SMG to SESS, but I cannot apply resolution mentioned in it, cannot find Bounce attack validation setting. Not mentioned in the Help either.

Anyone has idea how to handle this?
Thank you

Regards

[Vladimir Vucinic]

Hello Aleksandar,

SMG is Symantec Messaging Gateway and this is on-premise Symantec Email solution, so this is why you cannot find settings described in the article from 2021 for SMG in Email Security.cloud.

You can turn off address registration as described in KB:
Turn off Address Registration feature in Email Security.cloud

Regards,

Vladimir

[Joyce Madero-Buquid]

Hello, 

Please open a case to have this further looked at. 

Thank You. 

Joyce