I may do that. The price wasn't really that bad for the number of seats we have. Right now, I'm working through the manual for my Watchguard, trying to set up the SMTP proxy...
Joe Heaton Employment Training Panel From: Roger Wright [mailto:rwri...@evatone.com] Sent: Tuesday, February 17, 2009 2:36 PM To: MS-Exchange Admin Issues Subject: RE: Incoming spoofed e-mail issue I would propose installing something like Ninja in 30-day trial mode. Perhaps when you the benefits are seen the funds may appear to keep it going. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _____ From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Tuesday, February 17, 2009 5:29 PM To: MS-Exchange Admin Issues Subject: RE: Incoming spoofed e-mail issue AMEN Brother!!! Unfortunately, I work for the state of California, and still don't know if I'm going to have a job in a couple months... Joe Heaton Employment Training Panel From: Steve Moffat [mailto:st...@optimum.bm] On Behalf Of Exchange (Sunbelt) Sent: Tuesday, February 17, 2009 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Incoming spoofed e-mail issue Probably time to invest in a proper anti-spam solution. S From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Tuesday, February 17, 2009 2:30 PM To: MS-Exchange Admin Issues Subject: Incoming spoofed e-mail issue I'm getting users who are getting lots of mail in their inbox every morning that looks like it is coming from themselves. Looking at the headers, I see various actual senders, many coming from domains ending in .ru, or .pl, etc. Is there a way of blocking e-mails from these foreign domains? None of my users have legitimate business with anyone in Russia, or Poland, or any other foreign country. I tried setting this up under Sender Filtering, by putting the following in, for example: *...@*.pl Is there a different way of putting this in? I notice that the instructions for Sender Filtering says to block messages "claiming" to be from the following:, but these messages are actually "claiming" to be from the user, not what is actually in the header. Is there a different way of filtering these messages? There's nothing in the subject line that is keying the IMF, or my Symantec Mail Security for Microsoft Exchange. Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 jhea...@etp.ca.gov ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~