locked
How to block messages that falsly claim to be from my domain RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    I frequently receive emails that claim to be from users. administrators, or devices on my network. If I look at the email header info, it is VERY clearly NOT from my network/domain. It seems to me that there must be a way for my Exchange 2010 server to check messages coming in that claim to be from my domain, and see that they are not, and block them from being delivered, but I haven't found a way to do this. If anyone knows how, please point me in the right direction.
    Friday, April 4, 2014 11:02 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    What do you use for anti-spam protection? You should be able to block  by domain there.

    If you don't have anti-spam, you could enable the anti-spam agents on the hub transport and configure sender filtering per:

    http://technet.microsoft.com/en-us/library/bb125179(v=exchg.141).aspx

    Test before rolling out to production.

    Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

    Saturday, April 5, 2014 3:38 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    There are few options.
    1: Create Transport Rule
    2: Block the Domain on your Smart Host
    3: Block the source IP on your Smart Host.

    Cheers,

    Gulab Prasad

    Technology Consultant

    Blog: http://www.exchangeranger.com    Twitter:   LinkedIn:
       Check out CodeTwo’s tools for Exchange admins

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Saturday, April 5, 2014 12:39 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the reply

    1. What specifically would/could I set in a transport rule to block these types of messages?

    2. The domain is my own domain, and I don't use a smart host

    3. I don't see blocking the source IP as a viable solution because the IP is different every time I check these types of messages. I would be forever blocking new IPs

    Saturday, April 5, 2014 3:28 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    What do you use for anti-spam protection? You should be able to block  by domain there.

    If you don't have anti-spam, you could enable the anti-spam agents on the hub transport and configure sender filtering per:

    http://technet.microsoft.com/en-us/library/bb125179(v=exchg.141).aspx

    Test before rolling out to production.

    Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

    Saturday, April 5, 2014 3:38 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Is there any update?

    If you have any feedback on our support, please click here

    Cara Chen
    TechNet Community Support

    Monday, April 7, 2014 6:12 AM
    Moderator