Would there be anything in the email header which may make the NDR's unique? You might be able to generate a rule based on the that unique info.
From: Cameron [mailto:cameron.orl...@gmail.com] Sent: July-04-11 11:57 AM To: MS-Exchange Admin Issues Subject: NDR quandry Happy 4th to the Americans! I have a user that is getting bombed by NDR's that are not originating from him. It seems that he's the lucky recipient of some spammer using his account as a "sent from address". Is there any way to stop this or is he stuck with it? Exchange 2010, Outlook 2007 Thanks as always! Cameron --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist