First are you sure you're sending and it's just not spoofed email? Spoofed email can happen to anyone you can't stop it, though you can protect your identity\integrity by ensuring you have the correct spf records, rdns etc. If you have a copy of the email, check the headers of the message to see if it originated from your network and if it shows a source ip before your HT server. If it doesn't then it was a mapi submission. In the meantime you can create a transport rule to drop outbound emails with that subject if you're not doing outbound spam filtering which it seems you're not. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Try the below links out and see if it resolve your problem. http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html http://technet.microsoft.com/en-us/library/aa996604(v=exchg.80).aspx Girishp

Hi! All, I am facing problem in our Exch 2007 Sp3, it is propagating spam by using one user name from the address book and it is very rapid. I am afraid that our domain may get black listed. spam subject is like this: PE Kindly help me how to stop our Server from propagating spam. Thanks in advance. Exch AdminEXCH ADMIN

Change the password for that one user and see if that helps? Ideally I would have hoped you have some sort of AS/AV on your Exchange servers and desktops.Sukh

First are you sure you're sending and it's just not spoofed email? Spoofed email can happen to anyone you can't stop it, though you can protect your identity\integrity by ensuring you have the correct spf records, rdns etc. If you have a copy of the email, check the headers of the message to see if it originated from your network and if it shows a source ip before your HT server. If it doesn't then it was a mapi submission. In the meantime you can create a transport rule to drop outbound emails with that subject if you're not doing outbound spam filtering which it seems you're not. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Try the below links out and see if it resolve your problem. http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html http://technet.microsoft.com/en-us/library/aa996604(v=exchg.80).aspx Girishp

Hi! All, Thank you for your guidance and suggestions. It was a spoof and it stopped now. We were implementing firewall and post implementation we started facing this problem. We have enabled the Intrusion Prevention to the zones but it didn't work then we have enabled it on overall basis. Now it is alright. Just to make a note that when we were not having any firewall there was no spoofing problem, why it occurs post implementation. Thanks EXCH ADMIN