Solved

Internal "All" Distribution List - Replied to by an outsider?!??!!?

Posted on 2006-07-12
7
222 Views
Last Modified: 2010-03-06
Like most companies, we have an internal Ddistribution List on our Exchange 2003 server called "All".  It includes all of our internal employees, and no one else.  So.....One of our employees sent an email to this group today to schedule a company picnic.  About an hour later, she got a reply from some guy who she says she does not know, and who is not an employee of our comapny.  ??!!??HUH??!?!?  Is this possible?  How?  I'm the IT Manager (and helpdesk, and Systems Admin., etc...), so I have full control over our Exchange Server.  The reply wasn't so much Spam, as it was just saying "I'm really proud of that fantastic email you sent for the picnic, you must be proud of yourself".....

I'm thinking either one of our employees forwarded the email to another address and then replied as a joke, or someone someone left OWA open somewhere outside of the company or something.....

Any thoughts?  

Thanks.
0
Comment
Question by:tenover
7 Comments
 
LVL 32

Expert Comment

by:r-k
Comment Utility
It does seem like something like you already mentioned, i.e. a prank, or a former employee who is on the list by mistake etc. If you can't track down who sent the mail by looking at the mail headers, then the next best thing is to review the list membership and weed out anyone who does not belong.

It doesn't seem like a serious problem...
0
 
LVL 9

Expert Comment

by:trenes
Comment Utility
Yup try the headers to find out who has forwarded the mail to the external address.
This does not seem a real problem.
Unless someone replied from outside to your distribution list, that could cause some real havoc. you should only accept email from inside.
0
 
LVL 32

Expert Comment

by:Robberbaron (robr)
Comment Utility
I have seen a couple of spam messages addressed to all@xyz.com

So my distribution list is named like ~all.  (or something like that ;->)  
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:tenover
Comment Utility
Thanks for the comments, I'll dig a little deeper today.  How can I verify that I am "Only accepting email from inside" for my Distribution Lists?  I'e.: I do not want external people to be able to send email to my internal DLs!!  
0
 
LVL 32

Expert Comment

by:r-k
Comment Utility
In Active Directory User, right-click on the Distribution List, select Properties, then click on the Exchange General tab, and on that page you can restrict who can or cannot post to the list. A good start might be to "check" the box labeled "From Authenticated Users Only"
0
 
LVL 10

Accepted Solution

by:
ryangorman earned 500 total points
Comment Utility
Have you previously enabled Message Tracking? The Message Tracking Center within Exchange System Manager will allow you to see where the message was sent. You should expect to see a lot of "Delivered locally" for each internal mailbox and then a message for each external recipient that received the message.
0
 

Author Comment

by:tenover
Comment Utility
Well, like everyone figured, the email had been forwarded to one of users boyfriend.  He replied to the sender of the message instead of just his girlfriend.  Thanks.
And yes, I had tracking enabled, and that's how I figured it out.  
0

Featured Post

Wish Marketing would stop bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now