NDR Problems!!!

[trevorwilliams2]

I have a user account that is being flooded with NDR’s.

It appears that her address is being spoofed.

I am not an open relay, my queues are clean and I have run scans on both the server and client, which both came out clean.

I have also attempted a setting change in Exchange

Global Settings > Message Delivery > Sender ID Filtering.

I changed the property to: Reject (The message will not be accepted; the sending party will be responsible for NDR generation)


This has had no effect and the NDR’s continue.

Filtering does not appear to be an option as the properties of each NDR are different.

Does anybody have any ideas on how to preclude this from happening???

 

[Excalibur1701]

This is a recently new problem for us as well. They all seem to be coming from Russia. Every week, an employee from our group gets spoofed and receives several hundreds NDR's.

Does anyone know how to modify Exchange 2003 so that the SMTP does not accept ANY email from any domain with the extension of ".RU"??

Trevor, if you find a good solution to your problem, please post