RE: Transport Rule to forward email from specific sender to a mailbox
I created a transport rule similar to that by using the when a message header contains specific words condition. You then specify the header field -- most likely From in your case -- then enter the e-mail address(es) of the malicious sender as text. This keeps you from having to create a contact in your local Exchange org just for this purpose. Dave Beauvais -- Dave W. Beauvais / Exchange and Systems Administrator Ohio University Office of Information Technology From: Peter Johnson [mailto:johnson.pet...@gmail.com] Sent: Wednesday, May 15, 2013 00:56 To: MS-Exchange Admin Issues Subject: Re: Transport Rule to forward email from specific sender to a mailbox Have you tried adding the email address as a contact first ? Sent on the run! On 15 May 2013, at 4:49, xyz x...@minneapolis.edumailto:x...@minneapolis.edu wrote: Greetings, Exchange 2010 SP1 UR3. I have done this in the past, but not able to make work at the moment so not sure the issue on my end. I have found a specific SPAM sender with a known consistent email address per several tickets, so I want to forward all email from the internet sender to a specific mailbox for my review. Using EMC: When I create New Transport Rule – Conditions Step one – select conditions – click” from people” – Step 2 ––Edit the rule descriptions below in the same screen. When I click the link for people and click Add, it brings up the box for Select Recipient – Entire Forest with the scope picker, but all is shows are our internal email structure. I have not been able to figure out how to just bypass all the internal matters and ADD an external email address to identify the next conditions for said address. I must be missing something simple. Thanks for any comments or questions. Thanks for your help. Dana --- To manage subscriptions click here: or send an email to with the body: unsubscribe exchangelist --- To manage subscriptions click here: or send an email to with the body: unsubscribe exchangelist --- To manage subscriptions click here: or send an email to with the body: unsubscribe exchangelist
RE: Learned something new today
In Outlook 2007 through 2013 you can forward a message as an attachment by pressing Ctrl-Alt-F with that message selected or opened. Outlook 2010 and 2013 also have buttons in the ribbon for that functionality. In Exchange 2007 Outlook Web Access you can do the drag and drop trick into a new message window, but only in Internet Explorer, and only if you have the S/MIME ActiveX control installed. In Exchange 2010's OWA, I you can right-click a message in the message list and select Forward as attachment from the menu. All of these methods preserve the original message and message headers. Dave Beauvais -- Dave W. Beauvais / Exchange and Systems Administrator Ohio University Office of Information Technology From: John Matteson [mailto:john.matte...@gmail.com] Sent: Monday, February 25, 2013 17:32 To: MS-Exchange Admin Issues Subject: Learned something new today Who says you can’t teach an old geezer a new thing or two. In this case, it pertains to headers on mail messages. At some point in history, you could take a message that a user had received, dropped it into a new message as an attachment and the headers of the attached message would remain intact. Not so anymore. Found out today, that trick doesn’t work anymore. The headers get severely truncated. Now, does anyone in the Exchange collective here know how to stop that? (other than the obvious copy and paste of the original headers into the body of a new message)? John M. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Anybody on the list using DMARC?
I’m using DMARC for my personal domains as of about four days ago. One of the domains in particular has been spoofed a lot over the last few years judging from the insane amount of backscatter that bounces back at my catch-all address. I’m hoping that as DMARC is adopted by more providers that it will at least help cut down on the amount of spoofed spam/phish that actually get accepted by providers for delivery to innocent bystanders’ mailboxes. I’ve started to get my first few reports and it’s pretty interesting, if nothing else. I’ve directed my reports to dmarcian (http://www.dmarcian.com/) which turns the XML reports into something useful for humans and is currently free for personal use. The spoofed mail is coming quite literally from all around the world, with the majority appearing to originate in South America and the Middle East. Thus far I’ve only received reports from Google and Yahoo. For the enterprise, I’d say if you already have SPF -- and preferably also DKIM -- setup and working in your environment, DMARC is almost a no-brainer. It can be implemented very easily and in such a way that you can monitor its results without risk until you’re comfortable stepping it up to quarantine or reject. We’ve talked about setting up SPF but due to the sheer number of third-party services that are used across campus that we’ll never know about, it’s proven to be rather difficult. It seems like every month some department contracts with a new mass mailer. It could be argued that DMARC could be used to give us some visibility into usage of those services... I’ll be interested to see other replies on this topic as it’s something I would very much like to implement. Dave Beauvais -- Dave W. Beauvais / Exchange and Systems Administrator Ohio University Office of Information Technology From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] Sent: Friday, February 22, 2013 18:16 To: MS-Exchange Admin Issues Subject: Anybody on the list using DMARC? It’s become something of a topic of conversation here as of late, and wondered if anybody out there has any war stories to tell….. ** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: iPad calendar sync with Exchange cleans out calendar
Have you checked the recover deleted items list from inside the Calendar folder rather than in Deleted Items? When this happened to some of our users, we found the deleted data that way without me having to restore a backup. There's no Recover Deleted Items button available when in the Calendar view, so you'll need to add that button to Outlook's quick access toolbar. Dave Beauvais -- Dave W. Beauvais / Exchange and Systems Administrator Ohio University Office of Information Technology -Original Message- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Friday, January 25, 2013 12:45 To: MS-Exchange Admin Issues Subject: iPad calendar sync with Exchange cleans out calendar Exchange 2010 server, Outlook 2010 client, and iPad. User is using his iPhone and gets a notification that more than 25% of his calendar isn't synced up and asks if he wants to do it. Naturally he said yes and now most if not all of his calendar appointments have been cleaned out. I haven't found anything in Deleted Items or in Recover Deleted Items, so I'm thinking the only option we have here is tape restore to a recovery DB. Anyone else know of an option I'm missing? How about any way to recover this faster or prevent this in the future? -Paul --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Dynamic Distribution Groups and Address Book
Bill, Are there any OAL generation errors in the generating server's event log? You may want to increase the level of diagnostic logging for the OAL generator and then force an update to see if anything shows up. We're still on Exchange 2007, so what I'm about to mention may not apply to Exchange 2010. We had an issue where the task that updates the file distribution service on the client access servers was running before the OAB was regenerated each morning. This meant that although the generating mailbox server had a current version, the CAS servers that our clients get their copy from were all out of date by a day. This was only a serious problem during our initial migration when large numbers of mailboxes were being provisioned each night and users' clients couldn't find them reliably. I wrote the following simple script to work around that and would run it after all the night's mailboxes were provisioned: Get-GlobalAddressList | Update-GlobalAddressList -Verbose Get-OfflineAddressBook | Update-OfflineAddressBook -Verbose Get-ClientAccessServer | Update-FileDistributionService -Verbose -Type OAB Dave -- Dave W. Beauvais / Exchange and Systems Administrator Ohio University Office of Information Technology From: Mayo, Bill [mailto:bill.m...@pittcountync.gov] Sent: Wednesday, December 19, 2012 10:02 To: MS-Exchange Admin Issues Subject: RE: Dynamic Distribution Groups and Address Book I do not see it in OWA (looking at the GAL). From: Tobie Fysh [mailto:tobie.f...@freebridge.org.uk] Sent: Wednesday, December 19, 2012 9:51 AM To: MS-Exchange Admin Issues Subject: RE: Dynamic Distribution Groups and Address Book Is it in OWA? Thinking maybe cached mode on Outlook? Tobie From: Mayo, Bill [mailto:bill.m...@pittcountync.gov] Sent: 19 December 2012 14:09 To: MS-Exchange Admin Issues Subject: Dynamic Distribution Groups and Address Book I have created my first dynamic distribution group and must be missing something. The group shows up in AD and in EMC, but I cannot find it anywhere in the address book in Outlook or OWA. When researching it, I find some folks saying that you have to make some changes to make it show in “All Groups”, but they all seem to suggest that it should show up in the GAL. I do currently have a mixed 2003/2010 environment, but OAB generation is in 2010, and I created the group via the 2010 EMC. Any pointers/enlightenment appreciated. As usual, apologies if I am missing something perfectly obvious. Bill Mayo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
