You run an MTA of any kind in front of exchange? I fix the exact same issue with some rules in my postfix conf in front of exchange, I also have a script setup with ssh keys that dumps the actual AD user emails over to a file on my MTA so it can drop email not addressed to any of my users. My exchange server now never sees an email it isnt actually supposed.
jlc ________________________________ From: Stefan Jafs [EMAIL PROTECTED] Sent: Friday, April 11, 2008 7:01 AM To: MS-Exchange Admin Issues Subject: User getting 10 Non Deliveries per hour. I have I user that get tons of undelivered, I guess her e-mail has been spoofed. Any idea what can be done? Here are some examples. Your message did not reach some or all of the intended recipients. Subject: Brand New 2008 Models Sent: 11/04/2008 6:38 AM The following recipient(s) could not be reached: [EMAIL PROTECTED] on 4/11/2008 8:26 AM The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator. < incoming-postscan.hostedsepo.dk #5.0.0 X-Postfix; host mail.vejle.dk[87.54.60.196] said: 550 5.7.1 Requested action not taken: message refused (in reply to end of DATA command Your message did not reach some or all of the intended recipients. Subject: [!! SPAM] Fw: Sent: 11/04/2008 6:17 AM The following recipient(s) could not be reached: [EMAIL PROTECTED] on 4/11/2008 8:05 AM The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator. < pochtar.com #5.0.0> __________________________________________________ Stefan Jafs This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of Amico Corporation . Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
