Recipients are not removed from the envelope when flagged by DHA evaluation

This article applies to:

• Trustwave MailMarshal (SEG) 

Question:

• Why does MailMarshal SMTP not remove recipients from the email when flagged by DHA?

Information:

• In some earlier versions of MailMarshal SMTP, each recipient found to be invalid by the anti-DHA facility is stripped and a SMTP response 555 invalid recipient is returned to the sending server. This behavior reduces the load on internal email servers and reduces NDR sending, but it does not accomplish the task of DHA protection.
• In current supported versions, no response is sent until the configured limit is reached. When the limit is reached MailMarshal sends 556 Too many invalid recipient requests. Closing connection.
• In current supported versions, by default anti-DHA does not strip recipients.

A registry setting is available to permit the invalid recipient information to be stripped.

To configure stripping of invalid recipients by anti-DHA:

Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Trustwave cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Make sure that you backup your Registry prior to making any changes.

• In MailMarshal 10.0 or above Advanced Settings, enter the value Receiver.DHA.StripInvalidRecipients (boolean TRUE)
• In earlier versions:
  1. On the Array Manager, edit the Registry. 
  2. Navigate to the SEG Receiver DHA key - in version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Receiver\DHA
     • For full details of the location for each product version, see article Q10832.
  3. Add a new DWORD value named StripInvalidRecipients 
  4. Set the value to 1.  

• Commit the configuration changes, ensure that configuration has been updated, and then restart the MailMarshal Receiver service on each node.