spoofed email address -- incorrect ip address

I am running Exchange Server 2000.

I received an email from a co-worker via SMTP, with a virus infected attachment.  My anti-virus removed the virus.

The problem is, my co-worker never sent the email to me.  It does not even exist in her sent items folder.

I checked the header information ... the From and Return-Path (has her correct email address)   ... However, the IP address (is not our static IP address), it is from a site located in Amsterdam ...

Is their a way to detect this kind of fraud?
jimdormanAsked:
Who is Participating?
 
munichpostmanCommented:
You are another victim of spoofing.

If you are using a mail relay in front of your Exchange Server such as sendmail, you can setup a rule which rejects inbound mail from you domain. So for example if your domain is called test.com, create a rule on your mail relay which blocks all mail from test.com as mail from within your organisation will not be arriving via the Internet.

The other option is to outsource your Internet mail virus scanning and Spam filtering to one of the following.

www.postini.com
www.frontbridge.com
www.messagelabs.com
www.ciphertrust.com

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.