Re: Mail Relay or what??

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Zuhair Al-Saleh <Zuhair Al-Saleh@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

in our exchange 2003 server (SP2) we have a strange issue, that is we are
having our exchange server sends emails or "spam" from our server itself
using the same domain mail account of the user. for example: my mail account
is (user@xxxxxxxxxx) and I'm recieving "spam" mails from the same
(user@xxxxxxxxxx)!!!

what is the cause and the resolution of this problem? is it a bug in
exchange??

As Alexander points out, this is called "spoofing". You can protect
yourself by publishing your list of servers authorized to send email
on behalpf of your domain in SPF format. Then enable SenderID checking
on your inflow server(s). This won't prevent spam, but it will help
you (and others) with the spooing.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.



Relevant Pages

  • Re: Administrator account hijacked?
    ... Best 2 minutes spent on an Exchange ... Non-delivery reports have a very legitimate purpose and are used to ... global white lists defined by mail server administrators. ... software does not attempt to filter non-delivery reports for spam ...
    (microsoft.public.windows.server.sbs)
  • Re: Non-Existing addresses
    ... Are you running any kind of spam filter gateway in front of your Exchange ... or is your Exchange server having to deal with it all? ...
    (microsoft.public.exchange.admin)
  • Re: Anyone succesfully stopped Reverse NDR Attacks in exchange 2000?
    ... to their filtering servers and the Spam stops filling your Exchange Queues ... and destined to an non existing address on your server. ... connecting addresses as there are spam sent. ...
    (microsoft.public.exchange2000.admin)
  • Re: SPAM Blocking Measures
    ... No need to configure a gateway. ... Exchange Server? ... I prefer Spam Soap at www.spamsoap.com, ... Exchange AV software) and Fail Safe Spooling in case your server is down ...
    (microsoft.public.exchange.admin)
  • Re: How does Symantec Multi-Tier v10.0 stack up?
    ... won't kill the server like some Symantec AV stuff does). ... >> Thanks for the reply - does the Mail Security for Exchange not come as part ... >> Seems like you are doing a good job of the Spam - I want to be able to this ...
    (microsoft.public.windows.server.sbs)