RE: NDR SPAM - can you block by 'To:' address?
- From: "Walkowiak, Matt" <Matt.Walkowiak@xxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 27 Jun 2002 16:00:17 -0500
I know back in the land of 5.5, you could set the level of warning
messages that the administrator got - It'd take me 10 minutes to find it
again on a 5.5 box, and I have no clue if it still exists in Ex 2000...
Matt Walkowiak
-----Original Message-----
From: Sinton, Gary [mailto:gary@xxxxxxxx]
Sent: Thursday, June 27, 2002 9:22 AM
To: [ExchangeList]
Subject: [exchangelist] RE: NDR SPAM - can you block by 'To:' address?
http://www.MSExchange.org/ - Re-Vamped!
I put a rule in POSTMASTER Inbox to move subjects with "Notification:
Inbound" and "Notification: Outbound" to Deleted Items. Then while
consuming a lunch of twinkies and Coke, I peruse Deleted Items, adding
the SPAM sources to Filtered sites. Each day I have over 2000 messages
of this type.
We also retained old mailboxes for a time with an out-of-office message
to notify legitimate correspondents that the employee is no longer with
us. Problem is, that stuff originating from SPAM sites fills the
Outbound messages queue whether we delete the mailbox or not.
-----Original Message-----
From: Tetzlaff, Ryan [mailto:rtetzlaff@xxxxxxxx]
Sent: Thursday, June 27, 2002 8:21 AM
To: [ExchangeList]
Subject: [exchangelist] NDR SPAM - can you block by 'To:' address?
http://www.MSExchange.org/ - Re-Vamped!
We are getting an awful lot of SPAM for users who no longer have
mailboxes. These messages always end up going to the 'Postmater' as an
NDR message. I've tried blocking (filtering) by the sender, but as these
always change I still get tons of NDR SPAM messages. I'm wondering if
there is any way to filter or block by the 'To:' address - since these
people no longer work here, I would like to block anything sent to these
people specifically. That would clear up about 98% of the SPAM I get....
I'm working with Exchange 2k, sp2.
Any help would be greatly appreciated!
Ryan Tetzlaff
Systems Analyst I
Open Systems International, Inc.
E-mail: rtetzlaff@xxxxxxxx
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
gary@xxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
matt.walkowiak@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
