Re: Email Address Change for Spoofing Problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thats what is so weird. All the same, small domain. Server-2 is the schema
master as well as the master catalog server.

"Ed Crowley [MVP]" wrote:

Are server-2 and server-4 in the same Exchange organization? Same
administrative group? Same routing group? If not, how are the routing
groups connected? You shouldn't have Internet headers if you're sending
messages within the organization.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D1AB3CB6-0343-400E-AE96-677CFC9033C1@xxxxxxxxxxxxxxxx
Here is one of the headers, note the recieved info. Server-4 is my
exchange
server:

Microsoft Mail Internet Headers Version 2.0
Received: from server-2 ([10.0.0.102]) by SERVER-4.accredited-inc.com with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 9 Sep 2008 12:56:21 -0400
sensitivity: Normal
importance: Normal
mime-version: 1.0
from: Robin.Grasso <Robin.Grasso@xxxxxxxxxxxxxxxxxx>
to: Robin.Grasso@xxxxxxxxxxxxxxxxxx
date: 9 Sep 2008 12:56:21 -0400
subject: HF7787%
content-type: text/html; charset=utf-8
content-transfer-encoding: base64
Return-Path: Robin.Grasso@xxxxxxxxxxxxxxxxxx
Message-ID: <SERVER-4pH71yEXUIEA000002db@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
X-OriginalArrivalTime: 09 Sep 2008 16:56:21.0955 (UTC)
FILETIME=[FCA3A130:01C9129C]


"Ed Crowley [MVP]" wrote:

How does it say that?
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BC954BFD-FBD8-421F-A44D-3E0FB850BA8B@xxxxxxxxxxxxxxxx
Says its coming from inside. Looks like a request being sent from
another
server to the exchange server

"Ed Crowley [MVP]" wrote:

Coming from inside or outside Exchange? Can you view the SMTP headers
in
Outlook (open message > View > Options > Message options...).
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral
problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9816D7A8-6CBC-49FE-90B4-F9FFAC84DD8E@xxxxxxxxxxxxxxxx
No its verified now not Dynamics. Same messages again this morning,
this
time showing other user names with her new email address as the
sender
i.e.
John Doe [jane.doe@xxxxxxxxxxx]
Administrator [jane.doe@xxxxxxxxxxx

Always the same subject, and the body of the email remains the same
but
sequential as described earlier

"Ed Crowley [MVP]" wrote:

So you're saying that Dynamics is sending that? You might post
your
question to a Dynamics newsgroup, then.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral
problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:02275C1B-A744-46D3-AA78-549526C70EAC@xxxxxxxxxxxxxxxx
No nothing. She does receive reports from Microsoft Dynamics App
Aserver
to
her email though. I checked the header and it indicates coming
from
server-2
(the app server) to server-4 (the exchange server). Just seems
weird

"Ed Crowley [MVP]" wrote:

Does she have any agent software running, like a Blackberry
client,
or
some
such?
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral
problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:65C77059-4D76-414F-817C-EF47A7FB43FB@xxxxxxxxxxxxxxxx
Ed hopefully you are still around. The transition went
beautifully,
and
all
previous email address's were kept as secondary SMTP
address's.
I
do
have
only one user having a strange issue. The person keeps
receiving
an
email
from themselvs supposedly, from there new address.
The subject is: HF7787%
The body is: $$3444544545H 44455588FF 4545A

Whats really odd is everytime she receives one (about 8 so far
today)
the
last charecter changes i.e. A becomes B etc etc. Any ideas?
Thanks
again
for all the great help!!!

"Ed Crowley [MVP]" wrote:

I wouldn't count on it leaving the old addresses. I don't
trust
the
RUS
to
do things right; I would script the addition of new e-mail
addresses.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral
problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:07DF9855-9761-4791-9484-1EE36ED15E66@xxxxxxxxxxxxxxxx
Ed thanks for your response. I am hoping the new policy
will
sucessfully
force onto ALL users after creation, and leave the old SMTP
address
as
well
to be removed manually when ready. This would allow me to
give
my
users 2
or
3 weeks to advise all there contacts that on a certain date
there
old
address
will no longer be valid. If I am hearing you correctly
regarding
this
comment "If your rule is not complete for all users, i.e.,
if
some
users
were
given e-mail addresses separately outside the policy, then
changing
the
policy and having it restamp objects may not be a good idea
because
it
may
break some of them." I assume this only applies if I DO
NOT
create
a
NEW
policy to make the change, as advised on the LDAP warning
of
changing
default
policy structure. I want to make a new policy that will
only
affect
current
AD users in my single domain. I want the old SMTP address
to
shift
to
"secondary" until I delete. Thank you as well for your
input!!
I
assume
I
am reading this correctly.

"Ed Crowley [MVP]" wrote:

Only one recipient policy applies to any recipient object,
the
highest
priority one whose query matches the recipient. So if you
create
another
policy, which is not a bad idea, make sure that the query
applies
to
all
objects you want to match and it includes all the
addresses
you
want
to
stamp on the recipients.

If your rule is not complete for all users, i.e., if some
users
were
given
e-mail addresses separately outside the policy, then
changing
the
policy
and
having it restamp objects may not be a good idea because
it
may
break
some
of them. You need to be careful.

A new recipient policy will not automatically be applied
to
existing
users
unless you so direct after creating it.

Be careful about removing the old addresses or else your
users
may
lose a
lot of e-mail from correspondents who don't know that
their
addresses
have
changed.
--
Ed Crowley MVP
"There are seldom good technological solutions to
behavioral
problems."
..

"redrobit" <redrobit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:93F4B9E6-A524-42CC-AF1E-9E27CD8D60A1@xxxxxxxxxxxxxxxx
John one last question....and thank you so much for your
help!!!!
I
only
have about 50 users, so adding another SMTP address in
the
format
I
suggested, and then deleting the old SMTP directory when
ready
would
not
be a
big deal if that works accordingly. My concern is if I
create
a
NEW
recipient policy which it looks like I have to so as to
avoid
LDAP
problems
based on the article you provided, I need to make sure
it
doesnt
try
to
atuomatically change any Security group email addresses
or
alias's
etc.
I
ONLY want this to work for my internal users. Thank you
.

Relevant Pages

  • Re: Email Address Change for Spoofing Problem
    ... server to the exchange server ... Ed Crowley MVP ... "There are seldom good technological solutions to behavioral problems." ... policy and having it restamp objects may not be a good idea ...
    (microsoft.public.exchange.admin)
  • Re: Email bounce between two servers-SBSExchange 2003
    ... "There are seldom good technological solutions to behavioral problems." ... authentication, then in your SMTP Virtual Server's properties, Delivery ... to send mail the server wants authentication, ...
    (microsoft.public.exchange.admin)
  • Re: Exchange 2007 incoming mails not working
    ... Ed Crowley MVP ... "There are seldom good technological solutions to behavioral problems." ... I've created a new mailbox on the 2007 server. ...
    (microsoft.public.exchange.setup)
  • Re: sending spam
    ... One more thing--is your SMTP virtual server an open relay? ... Ed Crowley MVP ... "There are seldom good technological solutions to behavioral problems." ...
    (microsoft.public.exchange.misc)
  • Re: sending spam
    ... Ed Crowley MVP ... "There are seldom good technological solutions to behavioral problems." ... in the office except the server. ...
    (microsoft.public.exchange.misc)