How to block incomming Delivery has failed messages for a specific user in exchange 2007

Posted on 2014-08-26
Last Modified: 2014-08-31
I have a user who's email address has been hijacked and is being used for spam.. it is not being sent using our system, but she keeps getting Undeliverable bounce backs (Delivery has failed messages).  I created a local rule to permanently delete the messages, but it is still causing issues on her Iphone.. they do delete after a while, but not quick enough.  I would like to use a transport rule to take care of the issue.. Every couple of weeks I will turn it off to see if they are no longer using her address..

I have setup several different rules, but none of them seem to work...
this includes
sent to = her account
subject contains or body contains =  "Delivery has failed" (a separate rule) or "Undeliverable"

There must be a way to set this up to stop these messages..
any help would be great.... thank you in advance experts
Question by:David Modugno
    LVL 1

    Expert Comment

    by:Jackson Creager
    Block at the Firewall,  Just block the user sending the email (email Address)
    Or you can block it in exchange per the Exchange properties for the user that is getting the mail.  
    Depends how you want to go about it.   The best I believe is at the Firewall that way it never hits the Exchange Server at all, and the user does not have to mess with it.

    Another option I just thought of is to Change the Users email address, yes a pain and she will need to let the clients know on the outside, but that maybe the best way.   Just another option.

    Author Comment

    by:David Modugno
    thats the point... it looks like my user is sending the emails.... they are using her address to spam..
    its not generating from her computer... if i look at the header I the originating server keeps changing..

    so they spam people to the receiving mail server it was sent from (my users email)..
    because its a mass spam... if they hit addresses that are not real (and they do)... my user gets a bounce back of undeliverable message....
    LVL 1

    Accepted Solution

    The only thing I could think of on that, would be to Just shut down the address,  Beyond that is all the control you have since like you stated it is not coming from you network or user.  There is no place to really report it stolen,  I know on our network I have put Domain Keys, and SPF's to help Keep that stuff from happening.  Its the burden of the Email Server/Network Receiving the email to verify that the email is valid by using the Standards set in place.  But the only way to help you would be to change her address and block anything coming in with that address or have it go to a Admin mailbox she can see what is real and not until she gets the news out there on her new mail address.

    Hope this helps some.....  Bad Situation I have never seen in my years...

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Want to promote your upcoming event?

    Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    Email signatures have numerous marketing benefits. Here are 8 top reasons to turn your email signature into a marketing channel.
    Find out how to use dynamic social media in email signatures with this top 10 DOs & DON’Ts.
    In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
    In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now