Link to home
Start Free TrialLog in
Avatar of Moonatwork
MoonatworkFlag for Afghanistan

asked on

receiving spam emails from our own email addresses

Hi,
i am using OS Win 2003 Server sp2
MS Exchange server 2003 Sp2

Since 4 days some of our staff receiving spam emails using our their own email addresses,
when i see from email address, its their own email address

and some receving from different email address but same domain name, that user doen't exist in our domain...
i contacted our email filter provider websense, they said it looks like spoofing your domain,

how to prevent this, how to to find out who is spoofing our domain. what are the best ways to protect our domain and email system by thsese kind of problems..
ASKER CERTIFIED SOLUTION
Avatar of Alan Hardisty
Alan Hardisty
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You can't really stop spoofing itself as anyone can send an email and act as an imposter.
Example, IF you send an email from outlook before sending it click on options you can choose have replies sent to and the email going out will say its from that email instead of the one it was sent from.
The only way I know of to prevent them is to look at the header information from the received email and block emails from the source mail server it came from.
With the email opened in outlook again click options and at the bottom will be the header information look through it for X-MS-Exchange-Organization-PRD and block that domain from sending your system emails.
Return-Path: pwfbounces@mailer1.texterity.com
X-MS-Exchange-Organization-PRD: texterity.com
 

OutllokSendOptionsImposter.png
Attachment of what header info looks like.

Emailheaderseder.png
@wmiller - The way to stop this is to use Sender Filtering or anti-spam software.  If you are not familiar with Exchange, please refrain from posting in the Exchange Zone.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
To be honest, if you are receiving spoofed mail and you are using a mail filtering service, I would ditch the service and bring it in-house as Websense seems to be a waste of time and money.
Are you paying more than $239 per year for Websense?  If you are, ditch them and install Vamsoft.  Trial it first, but you will be impressed with the results.
Have you gotten this issue resolved?