Exch 2007 Propagating Spam
First are you sure you're sending and it's just not spoofed email? Spoofed email can happen to anyone you can't stop it, though you can protect your identity\integrity by ensuring you have the correct spf records, rdns etc. If you have a copy of the email, check the headers of the message to see if it originated from your network and if it shows a source ip before your HT server. If it doesn't then it was a mapi submission. In the meantime you can create a transport rule to drop outbound emails with that subject if you're not doing outbound spam filtering which it seems you're not. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
February 27th, 2012 5:20pm

Try the below links out and see if it resolve your problem. http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html http://technet.microsoft.com/en-us/library/aa996604(v=exchg.80).aspx Girishp
Free Windows Admin Tool Kit Click here and download it now
February 27th, 2012 7:45pm

Hi! All, I am facing problem in our Exch 2007 Sp3, it is propagating spam by using one user name from the address book and it is very rapid. I am afraid that our domain may get black listed. spam subject is like this: PE Kindly help me how to stop our Server from propagating spam. Thanks in advance. Exch AdminEXCH ADMIN
March 3rd, 2012 9:13am

Change the password for that one user and see if that helps? Ideally I would have hoped you have some sort of AS/AV on your Exchange servers and desktops.Sukh
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2012 9:26am

First are you sure you're sending and it's just not spoofed email? Spoofed email can happen to anyone you can't stop it, though you can protect your identity\integrity by ensuring you have the correct spf records, rdns etc. If you have a copy of the email, check the headers of the message to see if it originated from your network and if it shows a source ip before your HT server. If it doesn't then it was a mapi submission. In the meantime you can create a transport rule to drop outbound emails with that subject if you're not doing outbound spam filtering which it seems you're not. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
March 3rd, 2012 9:30am

Try the below links out and see if it resolve your problem. http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html http://technet.microsoft.com/en-us/library/aa996604(v=exchg.80).aspx Girishp
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2012 11:54am

Hi! All, Thank you for your guidance and suggestions. It was a spoof and it stopped now. We were implementing firewall and post implementation we started facing this problem. We have enabled the Intrusion Prevention to the zones but it didn't work then we have enabled it on overall basis. Now it is alright. Just to make a note that when we were not having any firewall there was no spoofing problem, why it occurs post implementation. Thanks EXCH ADMIN
March 4th, 2012 2:00am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics