users getting spoofed emails from self, need to stop
I have a number of people geting emails from themselves. They know to delete it but the frequency is increasing. I run Exchange 2003 with Antigen on the server. We have done a good job of keeping out spam, worms, etc but this problem is perplexing me. What is the best way to stop this type of spoofing from happening? Only one of the people has any type of ADmin access.
July 23rd, 2009 11:35pm

Well, first, look at the message headers and see if this message came from inside your organization. It probably did not. Spammers use this trick to try and deliver a message that someone will actually open. This is not the best approach, but you could define a Sender Filter and filter messages that arrive on your server that are sent FROM your domain. This works fine as long as you don't have digital senders, copiers, POP or IMAP clients or some types of mobile devices where messages are delivered from a valid internal receipient inbound through SMTP. Do you have any type of antivirus system in place? Are you using just the anti-virus piece of antigen?Jim McBee - Blog - http://mostlyexchange.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2009 11:40pm

Do you also use some othe layers of security such as postini or any other spam filtering softwares? Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
July 24th, 2009 12:53pm

Same has been discuss early and Antigen couldn't stop spoofinghttp://social.technet.microsoft.com/Forums/en-US/Antigen/thread/09c067f4-71b2-4b45-855e-ea6ff888eefaOR u need to create SPF...http://frankdzedzy.com/2006/02/15/using-sender-policy-framework-to-stop-email-spoofing/Other wise as per your requirment try any one from below1.GFi mail Essential2.Trend micro IMSS3.IRON PORT4.Borderware5.Message labs
Free Windows Admin Tool Kit Click here and download it now
July 24th, 2009 4:34pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics