blicking unwanted virus spam

In exchange is it possible to block these virus things
claiming to be from microsoft? Our antivirus picks up
around 10 per day and they jsut sit in the SMTP queue as
the antivirus cant delete it. We use Mcafee.

Is there any other way other than putting the adresses
into the filter list, of blocking these annoying emails?

If not, in the filter list can you block say a whole
domain as in anything from.adviser.net as an example?

Other people must have this very frustrating issue!!

Thanks a lot

anonymous
Mon Dec 08 08:43:29 CST 2003

Thanks a lot, i will do that.

How is it I can view the headers to find out where it is
really coming from?


Thanks
>-----Original Message-----
>Install ISA Feature Pack 1 and use the SMTP filter to
block these messages
>(attachements) before they even enter the server.
>
>BTW-> I would not block the addresses or the domain
names... because most of
>the time the owners of these email address have nothing
to do with it.
>Anyone can forge your e-mail address and send email on
your behalf...
>however, it is the headers that tell you who really sent
it.
>
>--
>-Javier
>
><< SBS ROCKS !!! >>
>
><anonymous@discussions.microsoft.com> wrote in message
>news:05d601c3bd7c$341658e0$a501280a@phx.gbl...
>> In exchange is it possible to block these virus things
>> claiming to be from microsoft? Our antivirus picks up
>> around 10 per day and they jsut sit in the SMTP queue as
>> the antivirus cant delete it. We use Mcafee.
>>
>> Is there any other way other than putting the adresses
>> into the filter list, of blocking these annoying emails?
>>
>> If not, in the filter list can you block say a whole
>> domain as in anything from.adviser.net as an example?
>>
>> Other people must have this very frustrating issue!!
>>
>> Thanks a lot
>
>
>.
>

Javier
Mon Dec 08 10:44:04 CST 2003

To view the message headers... just right-click the item and select
properties in the details section you will see a lot of criptic information.
One of the lines should say something about the sender (don't believe what
it says on From... it should be something like "Received from" with a fqdn
and/or an IP address. For example:

--
-Javier

<< SBS ROCKS !!! >>

<anonymous@discussions.microsoft.com> wrote in message
news:075201c3bd99$a5370c00$a301280a@phx.gbl...
> Thanks a lot, i will do that.
>
> How is it I can view the headers to find out where it is
> really coming from?
>
>
> Thanks
> >-----Original Message-----
> >Install ISA Feature Pack 1 and use the SMTP filter to
> block these messages
> >(attachements) before they even enter the server.
> >
> >BTW-> I would not block the addresses or the domain
> names... because most of
> >the time the owners of these email address have nothing
> to do with it.
> >Anyone can forge your e-mail address and send email on
> your behalf...
> >however, it is the headers that tell you who really sent
> it.
> >
> >--
> >-Javier
> >
> ><< SBS ROCKS !!! >>
> >
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:05d601c3bd7c$341658e0$a501280a@phx.gbl...
> >> In exchange is it possible to block these virus things
> >> claiming to be from microsoft? Our antivirus picks up
> >> around 10 per day and they jsut sit in the SMTP queue as
> >> the antivirus cant delete it. We use Mcafee.
> >>
> >> Is there any other way other than putting the adresses
> >> into the filter list, of blocking these annoying emails?
> >>
> >> If not, in the filter list can you block say a whole
> >> domain as in anything from.adviser.net as an example?
> >>
> >> Other people must have this very frustrating issue!!
> >>
> >> Thanks a lot
> >
> >
> >.
> >

Henry
Mon Dec 08 19:45:32 CST 2003

Don't bother unless it's mere curiosity.
You're wasting your time.

Even of it was sent from an originating ISP/account and not obfuscated or
spoofed instead of some poor sod with an open relay that got hacked, the
ISP most likely won't ( it's worth money to them until they get
blacklisted ) and the Account holder obviously won't, do anything about
it.

--
Henry Craven.

========= Post It Appropriately: ============
SBS 4/4.5 : microsoft.public.backoffice.smallbiz
SBS 2000 : microsoft.public.backoffice.smallbiz2000
SBS 2003 : microsoft.public.windows.server.sbs
=====================================

<anonymous@discussions.microsoft.com> wrote in message
news:075201c3bd99$a5370c00$a301280a@phx.gbl...
> Thanks a lot, i will do that.
>
> How is it I can view the headers to find out where it is
> really coming from?
>
>
> Thanks