Windows Forum

Ask something
Discussion Locked

Exchange message filtering

0 helpful
5 replies

by tdigirolamo

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My exchange server is receiving numerous e-mails, infected with viruses, from a spoofed address. That antivirus notifications I receive show the from address as "Hahaha". I tried putting that in the message filtering section of Exchange server, but it is not catching it. Any suggestions on blocking this would be appreciated.

5 replies

by gutridgesj

in the properties of your Internet MAil Connector, if you know the email address, you should be able, under delivery restrcitiong, to reject messages from xx@xxx
do you have the entire email address or just hahaha? If only part of the email address, turn on the logging on the IMS, restart IMS, then look at the event viewer for that server in the application log and see if that will give you what the entire email address is.

If not, get a network tcp/ip monitor to catch the packets. thatwill show the entire email address.

by mphoffar

On ours, we pretty much just strip any attachments with a .vbs or .shs extension and let the message pass onto the user and let them delete it.

Sure, every once and a while one or two people freak out when they see..but nothing more then a little explanation cures the problem.

Mark

This discussion is closed to new replies.