We had a "virtual loop" happen here from an OOF. Somebody went on vacation and set up OOF, then added an extra rule to auto-reply to all messages [1]. We have an app that uses a mailbox to send out daily updates, and has a rule on the mailbox to fire off a "new" message in response to anything sent directly to it.
You guessed it - his OOF rule fired to it, and the secondary rule fired. He got an auto-reply back for both of them - the secondary rule continued to fire sending another note back to the unattended box, which sent another message, etc. . . The only thing that saved us was the "Do not send" limit on his mailbox. Darcy [1] I don't know what the guy was thinking - he said he wasn't sure which one was the OOF rule, so he set both. -----Original Message----- From: Andy David [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 19, 2002 6:10 AM To: Exchange Discussions Subject: Re: Ouut Oof Offfice responses - Security Risk OOFs generally do not cause mail loops unless you are unwisely using a rule. ----- Original Message ----- From: "Bowles, John L." <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Thursday, December 19, 2002 9:08 AM Subject: RE: Ouut Oof Offfice responses - Security Risk I finally got my manager to allow me to turn this feature off. I've been telling her that this will leave us vulnerable for possible mail loops. And wouldn't you know it...we had one and she was like..you're right. Please turn that off. I don't think it's a good idea just for that fact. Cause it's a nightmare trying to fix a mail loop. ______________________________ John Bowles Exchange Administrator Enterprise Support & Engineering Celera Genomics [EMAIL PROTECTED] -----Original Message----- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 18, 2002 11:35 PM To: Exchange Discussions Subject: RE: Ouut Oof Offfice responses - Security Risk My company allows them to go out. I don't use the feature at all. Ed Crowley MCSE+I MVP Technical Consultant hp Services "There are seldom good technological solutions to behavioral problems." -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Daniel Chenault Sent: Wednesday, December 18, 2002 4:11 PM To: Exchange Discussions Subject: Re: Ouut Oof Offfice responses - Security Risk On a technical list I'm on that concerns Exchange (among other things) someone forwarded to the list someone's OOF from a major company. From his name and location the person found his address on the web. Since his OOF said he'd be gone for two weeks, out of town on vacation, he essentially is telling the whole world his house is unattended and ripe for picking. Bad idea. It's just a bad idea. ----- Original Message ----- From: "Archie Call" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Wednesday, December 18, 2002 2:01 PM Subject: Ouut Oof Offfice responses - Security Risk > Our company is proposing that we allow the Ouut Oof Offfice feature to > be turned on for Internet Mail in Exchange 5.5. I have seen comments > on this newsgroup discussing many security reasons for not doing this! > I have looked in the PDF file but am have diffculty locating this > discussion. I remember someone who wrote a little story that was very > convincing. > > The downsides I see are: potential for mail looping (bugs in Exchange > or Mailbox filled up); you tell the cyber crooks that you are gone and > your house can be robbed; you tell the spammer they have a valid > address; much increased mail traffic especially during a virus > outbreat; you send numerous messages to everyone in a ListServer. > > If anyone has anything to add here, it would be greatly appreciated. > > ...Archie Call > > Note: I misspelled OOO so as not trigger your filter. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] ======================================================= This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. ======================================================= _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
