• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 697
  • Last Modified:

System Administrator NDR for mail that was never sent

I had a few different users this morning recieve the same exact NDR from the System administrator regarding a spoofed email that was never sent out.  The NDR came from System Admin of a completely seperate domain and Exchange Server that we have.  No user ever generated the original message and it seems to be spam related.  The intented recipients do not even exist at our organization.  

We have corporate antivirus running with up to date definitions.  Here is the error - (Name and domain have been replaced for security reasons):

Your message did not reach some or all of the intended recipients.

      Subject:      RE:  -------------------------
      Sent:      11/5/2008 8:47 AM

The following recipient(s) cannot be reached:

      randomname@mydomain.org on 11/5/2008 8:47 AM
            The e-mail account does not exist at the organization this message was sent to.  Check the e-mail address, or contact the recipient directly to find out the correct address.
0
KevinITadmin
Asked:
KevinITadmin
  • 3
  • 2
1 Solution
 
gupnitCommented:
Hi,
Look at the headers of the mail and let us know.
You mean the Exchange server that generated the NDR is a part of same Exch Org or is an external domain
Cheers
Nitin
0
 
KevinITadminAuthor Commented:
I have an Exchange server at City Hall and an Exchange Server on a completely seperate domain for the Police Department.  The header of the NDR comes from the name of the Exchange server at the PD and is being sent to users on the City network.  There was a one way trust at one time, not sure how it is configured now as far as a backbone between the networks.   The PD Exchange Server has been blacklisted numerous times and I run into issues all the time with emails getting kicked back to my users.
0
 
gupnitCommented:
Hi,
Disable NDR on both servers: http://www.amset.info/exchange/spam-cleanup.asp
Thanks
Nitin
0
 
KevinITadminAuthor Commented:
Then how will I know if my messages are'nt getting through.  Sometimes they are critical emails sent from the Chief to the State and I need to know if it doesnt get delivered so I can forward the message from another server.
0
 
gupnitCommented:
Hi,
In that case you will have to live with this issue.
See the mail could have been spoofed and well the NDR will come to your users as their ID was spoofed. Well thats the basic problem.
Enable Sender-ID :: http://www.msexchange.org/tutorials/Configuring-enabling-Sender-ID-filtering-Exchange-2003-SP2.html
Cheers
Nitin
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now