Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

spoofed email address -- incorrect ip address

Posted on 2004-10-13
1
Medium Priority
?
198 Views
Last Modified: 2008-03-06
I am running Exchange Server 2000.

I received an email from a co-worker via SMTP, with a virus infected attachment.  My anti-virus removed the virus.

The problem is, my co-worker never sent the email to me.  It does not even exist in her sent items folder.

I checked the header information ... the From and Return-Path (has her correct email address)   ... However, the IP address (is not our static IP address), it is from a site located in Amsterdam ...

Is their a way to detect this kind of fraud?
0
Comment
Question by:jimdorman
1 Comment
 
LVL 10

Accepted Solution

by:
munichpostman earned 1000 total points
ID: 12305312
You are another victim of spoofing.

If you are using a mail relay in front of your Exchange Server such as sendmail, you can setup a rule which rejects inbound mail from you domain. So for example if your domain is called test.com, create a rule on your mail relay which blocks all mail from test.com as mail from within your organisation will not be arriving via the Internet.

The other option is to outsource your Internet mail virus scanning and Spam filtering to one of the following.

www.postini.com
www.frontbridge.com
www.messagelabs.com
www.ciphertrust.com

0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have come across a situation where you need to find some EDB mailbox recovery techniques, then here you will find the same. In this article, we will take you through three techniques using which you will be able to perform EDB recovery. You …
In my humble opinion (IMHO), TouchDown from Symantec is the best in class for this type of application, but Symantec has end-of-lifed it and although one can keep using it, it will no longer be supported or upgraded.  Time to look for alternatives t…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses
Course of the Month11 days, 10 hours left to enroll

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question