Exchange Server Forums

NDRs in user's mailbox

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> NDRs in user's mailbox

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

NDRs in user's mailbox - 1.Apr.2008 9:52:31 AM

projectile

Posts: 4
Joined: 19.Mar.2008
Status: offline

Hi

It appears that a spammer has sent a mass mailshot , using a valid email from my domain in the sender field / return to address of the messages. This means that the valid email address is receiving all the NDRs for mailshot, in their mailbox.

Is there anything I can do to control these NDRs flooding his and others mailbox within my exchange 2003 environment?

Thanks

Post #: 1

Featured Links*

RE: NDRs in user's mailbox - 2.Apr.2008 3:43:16 AM

myk3

Posts: 48
Joined: 9.Mar.2007
Status: offline

this too is happening to me! please any info on what we can do to stop this!

(in reply to projectile)

Post #: 2

RE: NDRs in user's mailbox - 15.Apr.2008 11:44:10 PM

sabasigh

Posts: 42
Joined: 18.Sep.2003
From: St. Louis
Status: offline

We've got the same issue too. Our directory has apparently been harvested and every day, a user will have about 100-200 NDRs in his Inbox for messages that he did not actually send.

We're using IMF, but that is it for anti-spam. I followed an article that I found here to lock down my Exchange server (http://smtp25.blogspot.com/2007/05/lot-of-spam-targeted-at-my-exchange.html but did not add my domain to the block list) and went so far as to filter all messages from MAILER-DAEMON@*.com and that catches some. I am tempted to add postmaster@*.com

We are debating going to a message screening service (messagelabs, postini, etc)...is that a viable solution?

(in reply to myk3)

Post #: 3