[求助]怎样大批量删除用户邮件！！ [复制链接]

今天真郁闷， 删了一天的邮件，  昨天有一应用服务器出现问题，狂发邮件，很多人收到了50万封邮件左右，  很苦恼、现在用户web邮箱也登不了。
outlook也不能收，要收估计到哪一年去了， MD 。50多万封，当我邮件服务器是垃圾啊。现在在服务器上删除也没删掉， 有什么规则可以让这个发件人
发过100封邮件后就禁止发送或者当垃圾邮件。。。。。。。

Try this command.

Get-Mailbox -Identity “UserMailbox To Search” | Search-Mailbox -SearchQuery subject:”This email is SPAM!”,from:”dirtyspammer@spam.com” -TargetMailbox “Mailbox to put search results into” -TargetFolder “A folder in that mailbox”

wilsonhoe:Try this command.
Get-Mailbox -Identity “UserMailbox To Search” | Search-Mailbox -SearchQuery subject:”This email is SPAM!”,from:”dirtyspammer@spam.com” -TargetMailbox “Mailbox to put search results into” -TargetFolder “A folder in th .. (2012-07-03 09:30) 

没有用的，因为邮件太多了50多万封，很慢， 根据主题、或者发件人。。都试过。先暂时删除用户邮箱，然后新建邮箱连接该用户。

if it is the same sender, just create a transport rule and drop all his incoming mail.

wilsonhoe:if it is the same sender, just create a transport rule and drop all his incoming mail.  (2012-07-03 10:14) 

嗯、 这样是可以的， 但是他们的服务器需要监控，如果连接失败就要发报警邮件，所以不能全部拒绝该发件人发邮件的， 只需达到一定程度禁止发送邮件。。在Exchange2007估计做不到吧，

erm... unless you can guess the spam text pattern, then you can drop the mail using transport rules.
but exchange 2007 is not that intellegent enough to drop such mail.

My environment use IPS (Intrusion prevention systems ), such as mailmarshal and sophos to block
such mail. it is much better and efficient. Install this on your mail gateway.

wilsonhoe:erm... unless you can guess the spam text pattern, then you can drop the mail using transport rules.
but exchange 2007 is not that intellegent enough to drop such mail.
My environment use IPS (Intrusion prevention systems ), such as mailmarshal and sophos t .. (2012-07-03 11:16) 

我可以知道每封邮件里的文本内容，因为是系统自动发送的邮件，所以几乎都一样内容，怎样可以做到删除邮件呢，比如该发件人发送邮件超过500封，以后再发送就删除掉。。
至于IPS的话， 我们也有类似于的垃圾邮件网关，但是该发件人属于内部，使用特殊端口，不经过邮件网关，所以很纠结！！！

Trasport rule does not have count on the email sent, only the logs has the count. so it is not possible
to put condition in 500 mails. the best i believe is talk to user and check his computer, i believe it
maybe a schedule taks to trigger email or the spam is trojan, and it is dangerous, it will jeopardy
your mail server easily. Good luck to you. Act fast before it is too late.

wilsonhoe:Trasport rule does not have count on the email sent, only the logs has the count. so it is not possible
to put condition in 500 mails. the best i believe is talk to user and check his computer, i believe it
maybe a schedule taks to trigger email or the spam i ..(2012-07-03 13:30)嬀/color]

同意楼上的说法。Exchange自带的功能无法实现超过一定数量邮件之后就禁止发送。这个问题还是要从根源上去解决。让相关人员检查他们的系统/程序以避免发送大量邮件