Thanks Andy! I did search for IMCEAEX in technet, found nothing. Now I find it, probably had a typo.
Basically that article instructs to create a DL containing everything in the GAL, and permit mail reception to those limited users from that DL only. I see at least one problem: maintenance. Every object (well, MBs and CRs) created in future must be added to that list. Most organizations will have a "Everybody" DL already, so that could be a minor problem. Nevertheless, at some time for some reason something could be created manually and problems could arise. Murphy says that MB or CR will be used by the CEO. Feces will fly through the fan. I'm thinking about a different solution: don't remove the smtp addresses, change them to a different domain not announced by the outside dns servers (e.g. [EMAIL PROTECTED]). Any mail sent to that addresses will be delivered to the MX for our.domain . Bounce it. Very easy when split dns and a different smtp gateway (not the internal exchange org) is used. I think the same can still be accomplished if the border smtp server is part of the exchange setup (working a bit on the routing table in the IMS configuration), but I'd need to check that. No doubt most people on this list know more about it than my humble self. Downside: spam and virus email will still use up bandwidth up to the external smtp gateways, load those servers, NDRs will be sent back to innocent addresses. OTOH suppressing the NDRs for that domain won't alert the occasional business partner who did a copy-paste of the address and tried to use it. However these problems would arise with the q245045 solution, too. Heiko -- -- PREVINET S.p.A. www.previnet.it -- Heiko Herold [EMAIL PROTECTED] -- +39-041-5907073 ph -- +39-041-5907472 fax > -----Original Message----- > From: Andy David [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2003 2:21 PM > To: Exchange Discussions > Subject: Re: selfgenerated outgoing smtp addresses > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;245045 > &Product=ech > > ----- Original Message ----- > From: "Herold Heiko" <[EMAIL PROTECTED]> > To: "Exchange Discussions" <[EMAIL PROTECTED]> > Sent: Thursday, October 09, 2003 8:07 AM > Subject: selfgenerated outgoing smtp addresses > > > > Ex5.5 > > We have some users without autorization for sendmaing or > receiving email > > to/from internet. > > Implementation is rather simple: > > - sending disabled through DL on IMS - Delivery > Restrictions - Recect > > Messages from > > - receiving disabled through removal of their smtp addresses. > > > > Works, however I noticed a weird thing. If I send any email > (internal) and > > (for example) CC on of those users, the outgoing email > contains a header > > like this: > > > > Cc: Surname Name > > > <IMCEAEX-_O=OUR+20+ORGANIZATION_OU=SITENAME_CN=RECIPIENTS_CN=D > [EMAIL PROTECTED] > > ur.dns.domain> > > > > I'm not yet sure if really the directory name or the alias > is used, since > > those tend to be the same for us. > > > > Is there a way to change this behaviour ? > > > > Thanks > > Heiko > > > > -- > > -- PREVINET S.p.A. www.previnet.it > > -- Heiko Herold [EMAIL PROTECTED] > > -- +39-041-5907073 ph > > -- +39-041-5907472 fax > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
