block specific sender

Open up the exchange admin console

Go to your site/configuration/Connections.

Double click on the Internet Mail Service. Go to the connection tabs.

Where it says accept connections from: go to message filtering.

Add the offending senders e-mail address there. I also check the box that says delete messages instead of moving to turf.

Press ok. press ok. You will get a box that says you need to start the IMS.

If you are doing this remotely go to server manager, highlight the name of your mail server. Computer/services/ start and restart the Microsoft exchange Internet mail service.

And your done. I usually send the offender an e-mail saying that they are blocked from sending mail to our users.

If you are using GSdo you have SP1 installed. If so, remember that you can block file extensions instead of just relying on it to block virus'.

Plus the above trick for deleting incoming e-mail is also useful in getting rid of spammers. (Hopefully you have relaying disabled, "IMS/Routing/Routing Restrictions/Check - clients that only authenticate")

Good luck

I go through my mail by opening the first of many, and then as I sort though them, move to folder or delete, the next opens in place immeadiately. While it is open and has this particular virus attachment, I open the message tab and click on make message rule using message. This automatically takes me to the rules window, and the from is already checked and step two is ready to be chosen. I choose, delete from server, and never see this individual ever again. Hope this helps you.

Rich