Block the IP address using the Deny option on Connection Filtering, make sure you enable Connection Filtering on the SMTP Virtual Server. Mark Fugatt Dedicated Supportability Engineer (Exchange) Microsoft Limited Desk: +44 (0)118 909 5630 Mobile: +44 (0)7966 858108 MSN IM: markfu@xxxxxxxxxxxxxxxxx Blog: http://blogs.technet.com/mfugatt Dedicated to proactively supporting Microsoft's enterprise Customers If you have any feedback about my work, please let either myself or my manager Andy Gitsham know at andygi@xxxxxxxxxxxxx <mailto:andygi@xxxxxxxxxxxxx?subject=Feedback%20on%20Mark%20Fugatt%20(Ex change%20DSE)> or telephone +44 118 909 3233 ________________________________ From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English Sent: 18 April 2006 17:32 To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] IMF Sensitivity: Private This header was taken from an email that I am trying to block so that no more come in via IMF however I have tried adding 205.158.62.67 to IMF and the domain associated to it but the email still keep coming. How do I get them to stop completely what am I missing here? Thanks Andrew Microsoft Mail Internet Headers Version 2.0 Received: from webmail-outgoing.us4.outblaze.com ([205.158.62.67]) by exchange.smoothrunnings.ca with Microsoft SMTPSVC(6.0.3790.1830); Tue, 18 Apr 2006 08:40:10 -0400 Received: from unknown (unknown [192.168.9.180]) by webmail-outgoing.us4.outblaze.com (Postfix) with QMQP id CD7431800D48 for <andrew@xxxxxxxxxxxxxxxxxxxxxx>; Tue, 18 Apr 2006 12:29:19 +0000 (GMT) X-OB-Received: from unknown (205.158.62.55) by wfilter.us4.outblaze.com; 18 Apr 2006 12:24:13 -0000 Received: by ws1-3.us4.outblaze.com (Postfix, from userid 1001) id DEAED101DA; Tue, 18 Apr 2006 12:29:15 +0000 (GMT) Content-Transfer-Encoding: 7bit Content-Type: multipart/alternative; boundary="_----------=_1145363355102262" MIME-Version: 1.0 From: "Eye Of Horus" <appfan@xxxxxxxx> To: "Andrew English" <andrew@xxxxxxxxxxxxxxxxxxxxxx> Date: Tue, 18 Apr 2006 07:29:15 -0500 Subject: RE: Usenet Received: from [82.173.177.164] by ws1-3.us4.outblaze.com with http for appfan@xxxxxxxx; Tue, 18 Apr 2006 07:29:15 -0500 X-Originating-Ip: 82.173.177.164 X-Originating-Server: ws1-3.us4.outblaze.com Message-Id: <20060418122915.DEAED101DA@xxxxxxxxxxxxxxxxxxxxxx> Return-Path: appfan@xxxxxxxx X-OriginalArrivalTime: 18 Apr 2006 12:40:10.0360 (UTC) FILETIME=[3B011F80:01C662E5] X-TM-AS-Product-Ver: SMEX-7.0.0.1433-3.52.1006-14393.000 X-TM-AS-Result: No--6.950000-8.000000-31 --_----------=_1145363355102262 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" --_----------=_1145363355102262 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="iso-8859-1" --_----------=_1145363355102262-