Fighting Spam being sent from internal clients.

My company is having an issue where internal users are answering phishing messages and giving out there usernames and passwords.
Then the spammer is taking that data and is sending out hundreds of thousands of messages and our domain is getting blacklisted with everyone
we are doing business with. My question is has anyone dealt with this sort of issue in the past.
I am looking for a way to setup a policy where users can only send out a certain amount of messages in a certain period of time.
Thanks for any thoughts on this issue.

Hello,
Based on description of your problem you should:
1. Instruct users to do not respond to that kind of emails. Maybe you should even schedule some kind of data security training for them – responding to phishing message is first
class security and company policy breach.
2. Install good antispam and antivirus software in your network.
3. Limit number of emails sent by user using:
http://www.slipstick.com/exchange/limit-number-of-internet-messages-user-can-send/
http://technet.microsoft.com/en-us/library/bb232205(v=exchg.150).aspx#Policies
Hope it helps,
Adam
www.codetwo.com
If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others
find the answer faster.

Similar Messages

Spam being sent from my Mail account...

I am receiving e-mails in my Mail account saying that certain messages can not be sent and the message gives the reason but they are being sent by other names, not my own, using my e-mail address. I went and changed my password in icloud.com but the very next day, the same thing happened. How can I get this to stop. Messages being sent from my e-mail account by others that are not me?

Yes, I read in another post that if it was actually sent from my account, I would see the e-mails in my Sent folder which I do not and that someone just forged where the e-mails were sent from and there is nothing that can be done about that except to bacically ignore them. There are not too many of them anyways.
Thank you for your answer.

Spam being sent from my btinternet email address

Hi
I keep getting delivery failure emails for emails that I definitely haven't sent, to email addresses that are only stored in my iPhone contact list (a very old version of it) and a few prople have told me they have had spam emails from this account as well. I have changed the password each time, removed any saved contacts, checked for linked addresses etc but it keeps happening. I don't even use this email address, but it's the only one that is linked to my BT account for which I have phone and broadband so I'm not sure I can just delete it, Any ideas?

Your account was probably previously hacked, when Yahoo had its systems hacked, your email address and all your email contacts would have been harvested by the hackers. This means that they can send spam emails to your contacts anytime they wish without having to re-hack your account so changing your password will have no effect.
They will have spoofed your email address so that the emails appear to be coming from your account. This is to fool your contacts in to thinking the emails are from you and are safe to open. When the emails are not delivered they will be returned to your email address hence the Mail Delivery Sytem returns..
There is nothing you can do other than to stop using that email address and tell all your contacts to treat any emails from it as spam and to delete them.
You could then set up a sub-account on your BT account and use that.
See links about spoofing email addresses.
http://en.wikipedia.org/wiki/Email_spoofing
See link for BT info.
http://bt.custhelp.com/app/answers/detail/a_id/39411/&s_intcid=con_sab_L1roblem%20with%20service:L...

Can we change the font in the email that is being sent from SAP ?

Hi,
I have a requirement where in we need to change the font for the contents in the mail being generated from SAP.
I am using the FM SO_DOCUMENT_SEND_API1 to send my mail.And the contents are just appened to an internal table as text elements.
Can we change the font in the email that is being sent from SAP to Arial 10points?

E-mails generated with that function module are created in plain text format. The font that would appear when reading the e-mail would be dependt on the user's setting for the e-mail application (e.g. Outlook).
To my knowledge, the font cannot be affected during it's creation.
Hope this sheds some light on your issue.
-Mark

Why is mail being sent from wrong account

I am trying to send mail from a specific account, however even though it is showing as the correct account when it is received it is from my partners account. I have followed the @mail@ set up and checked everything - which appears to be ok - but it is still wrong somewhere. HELP please.

I am having this same issue. I have several accounts (all .live) which I use for my various different jobs. Frequently now I am sending a mail, or replying to a mail, and it is being received from the wrong account.
- I check the account at the top of the mail that I am sending is correct.
- the mail listed in my 'Sent' folder shows as being sent from the correct account.
- When a client replies to my mail, the reply comes to an incorrect account, and on their email the heading for my original mail shows the incorrect email address & name.
- the email accounts seem to be random - not always the same incorrect one is used.

TS3276 my emails are not being sent from my desktop, but are capable of being sent by my apple phone. as well, I cannnot pull up any emails that I sent. They just disappear.

my emails are not being sent from my desktop, but they are capable of being sent from my iphone 5. Whatever I have sent just disappears from my desktop.

R1: Seems you didn't configure you email account in your Outlook client properly. please refer to the following KB article and try to create a new mail profile to configure your email account again:
http://support.microsoft.com/kb/2758902
R2: Do you want create subfolders under Inbox to category your emails? If so, we can just right click on Inbox > select New Folder... After that, we need to create rules to move or copy your emails to each subfoler. See:
http://office.microsoft.com/en-us/outlook-help/manage-email-messages-by-using-rules-HA010355682.aspx
Besides, in order to avoid confusion and keep track of troubleshooting steps, we usually troubleshoot one issue per thread in order to find a resolution efficiently. Concerning your other question, I suggest we create new posts for your other questions via:
http://social.technet.microsoft.com/Forums/en-US/home?forum=outlook
Thanks for the understanding.
Steve Fan
TechNet Community Support

HT4519 Default email is set but emails are being sent from another account

I have set up my email accounts on my iPad and set the default email as my home email. I have just noticed that all emails sent from my iPad are being sent from a different account. What am I missing?

Edit the address book entry to uncheck use display names. If you want to disable it completely Tools menu (Alt+T) > options > advanced >reading and Display and turn off the use of display names.
You never had this issue with Outlook.... The question is what did the recipient see, not what did you see. If they did not use Outlook there is a good chance they saw what was in their address book. You can address your mail as sent by "Very Important person from Very Profitable Company" If I add you to my address book as "The Goblin" I see "The Goblin" This is because Thunderbird places control in the hands of the user. Outlook does not. Note the Multiple ways to view a message body on the view menu.
I get your frustration, but your no longer using Outlook. Outlook is an excellent exchange client. I find it actually does email badly.

Ironport C170 Blocks Emails Being Sent From SMTP Relay

I have an issue with emails being sent out through our virtual SMTP Relay from a server on the DMZ. Any emails being sent to internal email accounts on our domain works fine. However the ones sent to external accounts are being rejected by the RAT. Here is a shot of the rejection message we are getting:
29 Oct 2013 10:09:58 (GMT -05:00)
Protocol SMTP interface Data 2 (IP xxx.xxx.xxx.xxx) on incoming connection (ICID xxxxxxx) from sender IP xxx.xxx.xxx.xxx. Reverse DNS host internal.domain.org verified yes.
29 Oct 2013 10:09:58 (GMT -05:00)
(ICID xxxxxxx) ACCEPT sender group UNKNOWNLIST match sbrs[-1.0:10.0] SBRS 0.4
29 Oct 2013 10:09:58 (GMT -05:00)
Start message xxxxxx on incoming connection (ICID xxxxxxx).
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx enqueued on incoming connection (ICID xxxxxxx) from [email protected]
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx on incoming connection (ICID xxxxxxx) to [email protected] was rejected by Recipient Access Table (RAT).
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx aborted: Receiving aborted by sender
I am new to the Ironport world so I am having a hard time figuring out how to allow for my SMTP relay to send emails to external email accounts. Thanks for any advice in advance!

It looks like the message should be arriving via SENDERGROUP RELAYLIST instead of
ACCEPT sender group UNKNOWNLIST .
Navigate to GUI --> Mail Policies --> HAT Overview
Then click the RELAYLIST sendergroup
Add the IP address of your sending MTA to this group, submit and commit changes.

I have 3 email accounts in Mail on Macbook Pro. Mail is only being sent from 1 account.

I have 3 email accounts in Mail. Mail is only being sent from 1 account, even though I select one of the other accounts in the "from" field. In my sent box, the "From" field says the accout I selected, but all recipients say they receive it from a different account. I set my composing preferences "send new messages from" to the main account, but all my mail is still being sent from a different account. I cannot see that this is happening, only people receiving it can. I noticed it because when they reply, it goes to a different account than what I sent to them. Any suggestions with what I should do?

Thank you! Funny. I had just found that answer eleswhere: http://simonwheatley.co.uk/2013/02/apple-mail-sending-email-from-the-wrong-accou nt/

My mac has started sending yahoo emails out as if they were being sent from an old gmail account I haven't used in years. Why has this just started happening?

My mac has started sending yahoo emails out as if they were being sent from an old gmail account I haven't used in years. Why has this just started happening?

It is important to understand that Mail uses TWO servers, a Receiving Server and a Sending Server.
When you create a new mail message, or reply to a message, the Sender server is shown in the message composition window like this:
That drop-down window allows you to select which of the Sending Servers you previously set up should be used.
In general, once you choose a Sending server, its choice will "stick" for all future replies to messages from that Receiving mailbox.

Malicious messages are being sent from my account

Malicious messages are being sent from my SKYPE account I have changed my password now will this stop it? Is anyone else having this problem is it a virus or does it mean my account has been hacked or something?

http://community.skype.com/t5/Security-Privacy-Trust-and/filter-list-for-skype-peerblock/m-p/1623366
Have a go at this and see what you pickup

Mail only being sent from NON-default account

I have two email accounts set up on my iPhone. One is a POP account - work email hosted by Earthlink; the second is a personal email account on Gmail. For months I've been able to send email from either account. The POP/work email account is designated as the 'Default' account.
Recently though, when I am in my POP/work email account and I reply to a recently received email in that account, I am able to reply to the email but the recipient receives my reply from my Gmail/personal email account. Again, this a reply I've sent while in my POP/work email account, AND my POP/work email account is even set as the 'Default' email account. Yet, replies are being sent from my Gmail/personal email account.
The same thing happens when I draft new emails (not replying to message from someone else) - when I draft them from my POP/work account, they are received by intended recipient but show that they came from my Gmail/personal account and therefore all replies to my emails are sent to my Gmail/personal account.
Can anyone help me with this?
Thanks in advance.

You are undisputedly THE Man/Woman! Essentially you solved it for me. Following your tip, I checked the SMTP settings of my work email account on my iPhone and somehow (don't know how) they had gotten deleted. In turn, somehow, that was having all mail go through the remaining functioning out-bound mail on my iPhone which was through my Gmail account. In some ways that is weird, but not a bad resilient capability by the iPhone to still send the mail using the other email account info.
Thanks again. I really appreciate you taking the time to post your thoughts. And I REALLY appreciate you being correct!
Best,
Tom

Outgoing emails are not being sent from my email address all of a sudden. It started happening when I changed my gmail password

After I changed my gmail password my outgoing emails are no longer being sent from my gmail account, but are being sent from my spouse's account so that replies go into her inbox, not mine.

rigoran1231,
You may have a corrupt preference, in order to correct this open Mail - Preferences - Accounts and re-input all the preferences for the account. While they may look ok one or more may be corrupt.

When replying an email from my icloud alias, it's being sent from primary account

Hi everybody
I have experienced a little problem which is that when I'm replying to an e-mail from my iphone using my icloud alias, my reply is being sent from my primary e-mail and not from my alias as it should be sent.
That's happening only when I reply from the iphone, not when using webmail icloud.com.
Has anybody experienced the same issue ever?
Thanks

It may be that you have more than one outgoing mail account, and you're sending from the wrong one. From the Mail menu bar, select
          Mail ▹ Preferences...
The Mail preference dialog opens. Select the Composing tab from the row of icons at the top. From the menu labeled
          Send new messages from:
choose
          Account of selected mailbox
Note that this setting may have no effect if you start a new message while a VIP or smart mailbox is selected in the mailbox list. Those are saved searches, not actual mailboxes.
If the problem remains, select the Accounts tab in the preference dialog, then select the affected account in the list on the left.
In the Account Information pane, select the correct server in the menu labeled
          Outgoing Mail Server (SMTP)
If there's only one server in the menu, select
          Edit SMTP Server List...
and add a new server with the correct settings. If you're not sure how to do that, try the Mail Settings Lookup.
Another possibility is that the wrong card in your address book is selected as yours. Select your card in the Contacts application. Then select
          Card ▹ Make This My Card
from the menu bar.

When I send out iMessages they show up on other peoples iPhones as being sent from my email address. How do I correct this?

When I send out iMessages they show up on other peoples iPhones as being sent from my email address. How do I correct this?

No that was not it. I was signed into my iMessages under my email address as soon as I signed out others can now receive my texts under my number. Thanks for the help though

Fighting Spam being sent from internal clients.

Similar Messages

Maybe you are looking for