Need to stop recieving relayed mail

[cfwdude]

I have a user (the CEO of course) who is recieving email addressed to user@web.com, while that is not our domain name, we are user@blah.com. I have checked the headers listed below. It appears that the mail is being relayed, and the servers that are relaying have been listed by some of the Open Relay databases.

But is it possible for me to block this mail from coming in? I have enabled filters to not allow anything from web.com with no success.

Ant ideas?
thanks

Microsoft Mail Internet Headers Version 2.0
Received: from web1.web.com ([198.104.184.15]) by SERVER.blah.com with Microsoft SMTPSVC(5.0.2195.5329);
Thu, 13 Mar 2003 21:37:52 -0800
Received: from smtp-gw-4.msn.com ([217.131.133.72])
by web1.web.com (8.11.6/8.11.6) with SMTP id h2E5bmN01253
for <user@web.com>; Fri, 14 Mar 2003 05:37:49 GMT
Date: Fri, 14 Mar 2003 05:37:49 GMT
Message-Id: <200303140537.h2E5bmN01253@best1.best.com>
To: <user@web.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=&quot;_separator_&quot;
Subject: Do you want my tight pink
From: Jessica D <jessdar291@msn.com>
Return-Path: jessdar291@msn.com
X-OriginalArrivalTime: 14 Mar 2003 05:37:52.0510 (UTC) FILETIME=[DB44C9E0:01C2E9EB]

--_separator_
Content-Type: text/html
Content-Transfer-Encoding: base64


--_separator_--

 

[lesleint]

Your bext option would be to purchase:
ORF Enterprise Edition
It cost $100 and is well worth the ease of use and kills alot of spam coming to your users.
Free way of doing it is to go to your SMTP Properties page, which can be found in the System Manager for Exchange, and go to the Access tab then the Relay button and make sure it says Only The List Below and have the bottom box checked. This will make any server that tries to relay through you authenticate itself to your Active Directory. So basically the only people that can Relay are your users. Only gotcha here is if you have satellite offices that use Pop3 and SMTP to get there email they must authenticate to send mail through your SMTP server. Understand it all? Best advice is to do both!

 

[cfwdude]

Thanks for the response, however after doing more digging, I found out that the email being recieved was being forwarded from an old ISP that the user used to use. His mail account had been deleted, but forwarding was configured. We shut that off and solved the problem.

Thanks

chris