Hi Chris, Nothing you do can stop it hitting your exchange box, except if you are using a delivery gateway. A delivery gateway might be something like a viruswall or ISA box. Depending on what (if any) this gateway is there may be options to stop/remove the virus there. If your exchange box is external facing (ie. receives directly from the net) you can't stop some mail from being delivered to exchange. If you're worried about it you could investigate putting a server-side rule in the users inbox to auto-delete an infected message. Jamie. -----Original Message----- From: Chris Chauv [mailto:chrisc@xxxxxxxxxxxxxxxxxxxxx] Sent: Thursday, 21 August 2003 8:27 AM To: [ExchangeList] Subject: [exchangelist] SoBig.F virus... http://www.MSExchange.org/ Hi All I have a user who's constantly getting emails from the outside world that apparently contains the SoBig.F virus. Although other users have gotten those emails, it's not as constant as this one particular user. So far today that user has gotten over 250 emails from different people w/ what appears to be legitimate email accounts. Is there anyway to prevent those emails from hitting our Exchange 2000 box other than deleting his email account? Thanks. Chris ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: jabyrnes@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')