[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?

Exchange 2010 Transport Rule Subject Search String in EMC

Posted on 2017-12-07
5
Medium Priority
?
19 Views
Last Modified: 2017-12-11
Trying to figure out how to get my transport rules to work on subject search strings correctly.  Here is an example.

Current subject filter search string:

Thank you for your case! Case#

Because I'm trying to filter and redirect the following subject emails:

Thank you for your case! Case#:233321 - Blahblahblah

However I also catch

RE: Thank you for your case! Case#:233321 - Blahblahblah
and
FW: Thank you for your case! Case#:233321 - Blahblahblah

I tried figuring this out but the transport rule is so important, any interruption was cause an armed insurrection.
0
Comment
Question by:OasisEE
  • 2
  • 2
5 Comments
 
LVL 12

Expert Comment

by:Jose [MCSE] Ortega C
I already worked with this kind of attacks so This would be my query just fix the start and end time.

$Exported=@()
$Subject = "Thank you for your case! Case"
Get-MessageTrackingLog -Server Mail -Start "07/01/2016 00:00:00" -End "07/25/2016 23:59:59" -MessageSubject  "$Subject"  | where{ $_.Directionality  -eq "Incoming" -and $_.OriginalClientIp -ne ""} | select ComputerName,Timestamp,ClientIp,ClientHostname,ServerIp,Sender,Directionality,OriginalClientIp |  foreach{ $temp = New-Object PSObject -property @{ OriginalClientIp = $_.OriginalClientIp};  $exported+=$temp}
$exported

Open in new window


You will get all the information in the $exported var, from there you can do whatever ( | convertto-json file.json)  (export-csv -notypeinformation here.csv), ( |convertto-html file.html) etc.

ex:
$exported |export-csv -notypeinformation here.csv

Open in new window

0
 

Author Comment

by:OasisEE
Jose, thank you for answering so quickly.  However this is not a message search.  I am trying to edit a Transport Rule and regular expressions are kinda kickin my ass trying to figure it out.

https://technet.microsoft.com/en-us/library/aa997187%28v=exchg.141%29.aspx?f=255&MSPPError=-2147217396
0
 
LVL 7

Expert Comment

by:Ronin
Have you tried using server-side mailbox rule for that?
Check options available in New-InboxRule.
Unless you want this to be addressed PRIOR message hitting the mailbox.
0
 

Author Comment

by:OasisEE
Unfortunately it has to be PRIOR to hitting the mailbox.  Trust me, i would of loved to use simple server-side mailbox rules.
0
 
LVL 7

Expert Comment

by:Ronin
How about this one? Would that work?
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Join & Write a Comment

If something goes wrong with Exchange, your IT resources are in trouble.All Exchange server migration processes are not designed to be identical and though migrating email from on-premises Exchange mailbox to Cloud’s Office 365 is relatively simple…
Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question