[LMStone]

Originally Posted by Userx

My real question is how to avoid this to begin with.

Thanks for any feedback,
J

This isn't a Zimbra question so much as a user-education issue regarding phishing techniques in general, or did I miss something?

I personally don't believe you can stop all users from making these kinds of mistakes. So, aside from end-user education (and reinforcement), I'd just be sure I was using an outbound smart host to filter my outbound Zimbra mail, and have it let me know when my Zimbra system (and which account) starts sending spam. That you are being notified by an increasing large deferred queue means you have an opportunity to catch trouble perhaps a day or more earlier than you are now IMHO.

Hope that helps,
Mark