Skip to main content

LevelBlue + SentinelOne: Global Partnership to Deliver AI-Powered Managed Security Operations and Incident Response. Learn More

LevelBlue + SentinelOne: Global Partnership to Deliver AI-Powered Managed Security Operations and Incident Response. Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
SentinelOne
Advancing integrated, intelligence‑driven security operations
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Partner Portal
Loading...
Loading...

HOWTO: Configuring NDR sending from the SPE Agents and Services

Expand / Collapse


This article applies to:

  • MailMarshal SPE

Question:

  • How can I set the FROM address for Non Delivery Reports (NDRs) from MailMarshal SPE agents and services?
  • How can I disable NDR sending from the MailMarshal SPE agents and services?

Background:

MailMarshal SPE agent services use EASendMail to deliver administrative email messages. The messages affected include email delivery of reports, and error/status notifications. This service IS NOT used to deliver NDRs for MailMarshal managed email.

If a message cannot be delivered:

  • By default the service will send a NDR to the configured "from" address of the original message.
  • By default the NDR will be sent "From" the following address: "PostMaster" <marshalspe@localhost>

You can disable sending of NDRs, and you can change the "from" address of the NDRs.

Procedure:

For each of the following, repeat the steps on each server where you want to make the change. With current versions, this is only the Marshal Interface Agent server. Older versions run this process on each server where any SPE Agent service is installed.

To disable NDRs:

  1. On a MailMarshal SPE server, open a command prompt.
  2. Enter net stop easendmailsvc
  3. Using Windows Explorer, navigate to %SPEInstallPath%\Mail Service\conf
  4. Edit the file config.txt
  5. Change the following line
    smtpsend/delivery/report: 1
    to
    smtpsend/delivery/report: 0
  6. Save the file.
  7. At the command prompt, enter net start easendmailsvc

To edit the NDR FROM address:

  1. On a MailMarshal SPE server, open a command prompt.
  2. Enter net stop easendmailsvc
  3. Using Windows Explorer, navigate to %SPEInstallPath%\Mail Service\conf
  4. Edit the file _delivery_report.txt
  5. Change the following line
    From: "PostMaster" <marshalspe@localhost>
    to (replace the values as desired):
    From: "*yournamehere*" <*youraddresshere*>
  6. Save the file.
  7. At the command prompt, enter net start easendmailsvc

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.