I am running Exchange 2007 with no edge server and i am getting emails sent to users that do not have the users email address in it. For example: New message arrives for John.Doe@fabrikam.com from jane.doe@fabrikam.com. But the To: line says bob.marley@fabrikam.com How can this happen?Also, my next question is, how can i remove .Zip from allowed attachments without an Edge Server.

You may need to remove Anonymous Logon AD permission from Receive connector, check below article for further detail... HOW TO: Prevent annoying spam from your own domain http://exchangepedia.com/blog/2008/09/how-to-prevent-annoying-spam-from-your.html To block zip file attachment you have two option, first one is install Antispam feature on hub transport server and set attachment filtering, while second option is create transport rule to block the zip file type attachment. Refer below articles for further details on both of these options... How to Enable Anti-Spam Functionality on a Hub Transport Server http://technet.microsoft.com/en-us/library/bb201691.aspx How to Configure Attachment Filtering http://technet.microsoft.com/en-us/library/aa997139.aspx Introducing Attachment Inspection in Transport Rules http://msexchangeteam.com/archive/2009/05/11/451274.aspx Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com