All you can do to eliminate or reduce the problem would be to block the NDRs. If I want to send out e-mail as "marty@yourcompany.com" there's nothing you (or Trend) can do to stop me from doing. If I blast out a million spam messages with that address and some of them hit invalid addresses (as they will) then the NDRs generated from those servers are going to go to the ostensible sender...you. Up to the point where you receive the NDR this process hasn't touched your systems at all, so there's nothing you (or Trend) can do to stop it. Sorry! I hate it too. I have clients who have to deal with that issue periodically. Spammers suck. ESPECIALLY the ones too cowardly to post with their own real addresses (which is pretty much all of them). -- -Ben- Ben M. Schorr, MVP Roland Schorr & Tower http://www.rolandschorr.com http://www.officeforlawyers.com "Marty" wrote in message news:D7E07A3D-67DE-44A8-86FF-B27C4CD67044@microsoft.com: > Thanks for the reply...I will first check with Trend Micro as they might > offer a companion service to elimnate or at least reduce this problem. > > "Lanwench [MVP - Exchange]" wrote: > > > > Marty wrote: > > > > Using SBS 2003 R2 and Win XP Pro Clients: > > > > > > Have experienced this problem before and via Microsoft Srvr Dwn > > > support have applied email spoofing actions about 6 months ago. Now > > > problem has returned and is spradic. > > > > > > Users receive system admin Alerts regarding Undeliverable email. > > > Users reports that they have not sent email and don't know recipient. > > > > > The sender was spoofed on the original message. This happens to everyone and > > is a very common problem....it isn't something you can control. Anyone can > > send mail purporting to be from you - and you will get the NDR even if you > > have nothing to do with it. > > > > > > The problems seems to "travel" from one user to another every month > > > or so. Server uses Trend Micro SMB & Scanmail protection and has > > > been very good at stopping Virus/Trojans and Spam. Lately been > > > receiving a lot more spam. > > > > > You should also use the IMF or another product/service (could even look into > > a hosted service like Postini or MailFoundry, etc.) > > > > > > > Trend Micro A/V reports Server & All Clients clean as far as > > > Virus/Trojan infections. > > > > > Right - this problem rarely has nothing to do with your own network. > > > > > > Spam rates are high at 25% or more of total > > > daily email received. > > > > > > Here is an Example of a typical System Administrator alert to a User: > > > > > > <snip> > > > > > > > > > Thanks for assistance > > > ----------------------------- > > > > > Google for > > > > > >
