We had a user that this was happeing to. We had the user change her password. She had responded to a spam email and sent them her username and password.
----- Original Message ----- From: "Scott Schneider" <sschnei...@inscapesolutions.com> To: "MS-Exchange Admin Issues" <exchangelist@lyris.sunbelt-software.com> Sent: Monday, July 4, 2011 12:08:33 PM Subject: RE: NDR quandry Would there be anything in the email header which may make the NDR’s unique? You might be able to generate a rule based on the that unique info. From: Cameron [mailto:cameron.orl...@gmail.com] Sent: July-04-11 11:57 AM To: MS-Exchange Admin Issues Subject: NDR quandry Happy 4th to the Americans! I have a user that is getting bombed by NDR's that are not originating from him. It seems that he's the lucky recipient of some spammer using his account as a "sent from address". Is there any way to stop this or is he stuck with it? Exchange 2010, Outlook 2007 Thanks as always! Cameron --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
