?
Solved

Internal "All" Distribution List - Replied to by an outsider?!??!!?

Posted on 2006-07-12
7
Medium Priority
?
236 Views
Last Modified: 2010-03-06
Like most companies, we have an internal Ddistribution List on our Exchange 2003 server called "All".  It includes all of our internal employees, and no one else.  So.....One of our employees sent an email to this group today to schedule a company picnic.  About an hour later, she got a reply from some guy who she says she does not know, and who is not an employee of our comapny.  ??!!??HUH??!?!?  Is this possible?  How?  I'm the IT Manager (and helpdesk, and Systems Admin., etc...), so I have full control over our Exchange Server.  The reply wasn't so much Spam, as it was just saying "I'm really proud of that fantastic email you sent for the picnic, you must be proud of yourself".....

I'm thinking either one of our employees forwarded the email to another address and then replied as a joke, or someone someone left OWA open somewhere outside of the company or something.....

Any thoughts?  

Thanks.
0
Comment
Question by:tenover
7 Comments
 
LVL 32

Expert Comment

by:r-k
ID: 17097552
It does seem like something like you already mentioned, i.e. a prank, or a former employee who is on the list by mistake etc. If you can't track down who sent the mail by looking at the mail headers, then the next best thing is to review the list membership and weed out anyone who does not belong.

It doesn't seem like a serious problem...
0
 
LVL 9

Expert Comment

by:trenes
ID: 17097772
Yup try the headers to find out who has forwarded the mail to the external address.
This does not seem a real problem.
Unless someone replied from outside to your distribution list, that could cause some real havoc. you should only accept email from inside.
0
 
LVL 32

Expert Comment

by:Robberbaron (robr)
ID: 17098360
I have seen a couple of spam messages addressed to all@xyz.com

So my distribution list is named like ~all.  (or something like that ;->)  
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:tenover
ID: 17099379
Thanks for the comments, I'll dig a little deeper today.  How can I verify that I am "Only accepting email from inside" for my Distribution Lists?  I'e.: I do not want external people to be able to send email to my internal DLs!!  
0
 
LVL 32

Expert Comment

by:r-k
ID: 17100593
In Active Directory User, right-click on the Distribution List, select Properties, then click on the Exchange General tab, and on that page you can restrict who can or cannot post to the list. A good start might be to "check" the box labeled "From Authenticated Users Only"
0
 
LVL 10

Accepted Solution

by:
ryangorman earned 2000 total points
ID: 17100681
Have you previously enabled Message Tracking? The Message Tracking Center within Exchange System Manager will allow you to see where the message was sent. You should expect to see a lot of "Delivered locally" for each internal mailbox and then a message for each external recipient that received the message.
0
 

Author Comment

by:tenover
ID: 17101248
Well, like everyone figured, the email had been forwarded to one of users boyfriend.  He replied to the sender of the message instead of just his girlfriend.  Thanks.
And yes, I had tracking enabled, and that's how I figured it out.  
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here in this article, you will get a step by step guidance on how to restore an Exchange database to a recovery database. Get a brief on Recovery Database and how it can be used to restore Exchange database in this section!
How to effectively resolve the number one email related issue received by helpdesks.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question