A call to the guru's

[jaksen112]

True dilemma!!

I have user jane@myco.com, she currently gets mail at two addresses here, one of the addys gets a ton of spam but also gets some important mail. I need to figure out who is sending mails to that address so she can inform them of the new address b4 I remove the spam cluttered one from her smtp. the only way I see to do this so far is to use message tracking at the end of the day which involves alot of work and is wuite tedious.

ANYONE GOT AN IDEA? 01110000

 

[aultbmh]

make a new mailbox with the address that gets all of the spam mail then turn on out of office attendent for a month and type the in you want in there about the new address to use, after a month delete mailbox. Most spam comes from address that are not real anyway so you don't have to worry about them getting the new one because the out of office reply will bounce anyway!

good luck

 

[jaksen112]

exchange see's this user with both these address already though, would it even let me create a mailbox with the same addy?

I was going to make a rule that would flag any messages sent to the spam cluttered address red in color so an assitant could sort them out, but if I type her secondary smtp it auto changes to the primary! 01110000

 

[brontosaurus]

why not remove the spam laden SMTP address from the user's account, create a new bogus user, and assign the SMTP address to that account. Then give the real user complete access to the bogus user's mailbox, and have her open it as a second Inbox in Outlook?

 

[HerbRoach52]

Again, these all will work but why not fix the problem directly?

Instead of accommodating these scumbag spammers (cause its taking space on ur server and taking ur time - not to mention bothering the user) enable message tracking, (but make sure you monitor this .log file it can get big fast!) get the IP or DNS name of these scumbags, enter them into your firewall or proxy (hopefully you have one these) and block em! Better yet, you might want to look into your router and view the routing table...its possible you have some users hitting naughty sites, once again you can blcok these spam IP's at the router...either way, you want to keep the spam off the exchange server...and if you set up an out of office reply, please read the security issue with that on the microsoft site...

...the higher the fewer

 

[jaksen112]

I have msg tracking enabled, but usually users just fwd me their spam and I block the entire sending domain with the ESM filter although they seem to just keep coming in.

I will try the smtp switch tonight although I'm not sure exchange will let me do this, the two addresses are somehow joined, I already see the error "this email address is already in use" 01110000

 

[brontosaurus]

Once you delete the address from the current user's account, there may be some AD replication time before it can be re-assigned.

 

[Zelandakh]

Get the users to include the Internet header when they forward it. Then you can ban the source rather than the spoof address.

 

[franklin1232]

I use a system that is capable of blocking keywords. Once you get a list that works it makes no difference what domain or IP address they originate from. They change to much to keep up anyway.