I am using Exchange v.4 Server and Client for our email system and I am having trouble rejecting messages from a very annoying spammer. He is spamming a number of our employees, so I want to block him at the Server side of our system instead of setting up each user individually. I have tried setting his address in the Delivery Restrictions/Reject Messages in IMC and setting his IP (or what I at least thought was his IP address) in the Accept/Reject Messages by Host in IMC as well. Each time I block him in one of these manners, he either gets a new email account or connects to a different server and resumes spamming.
First, let me see if I have the right IP, since that is likely to be the direction I need to turn. In the header of his emails I have 3 Received: statements. The first is from our ISP, so I know it is clean (our pick up from the ISP). The second, I thought was his connection because it never changes but rejecting based upon it appears to do nothing. The third works for about a week, so I figure it is the right address (or so it appears) but this IP address changes and we begin receiving spam from him again.
I have requested this quack stop sending, but my pleas fall on deaf ears. I have complained to his ISP (hotmail.com), but it appears they are no help either as they claim they have cancelled his account and a week later I receive a slew of dribble from him again on a new hotmail account!
Normally I would simply ignore this sort of intrusion, but he sends multiple copies of his dribble containing upwards of 20 or 30 attached documents at a time to multiple recipients here and since we have a dial-up connection, it clogs up our mail.
Does anyone have any idea how I can block this guy completely? Can I set Exchange Server to reject all incoming mail from hotmail.com somehow? If I can, how do I do it as I haven't found a way to do this yet. Also, is there any way to filter through incoming emails and reject based upon some criteria that way? That would be equally useful to know as an alternative to using the address or IP.
Any help that y'all could give would be GREATLY appreciated. Thanks in advance!!!