Blocking Spam Email

Guys

I am having an issue where one of my users is subject to lots of spam email. I am running sbs 2008 along with sophos endpoint security & pure message for my spam filter.

It’s strange as from within outlook it shows from: Administrator, Julie & then the email address of my client.

I cannot block the sender address as it’s not visible any where within the email.

Any ideas on how I can avoid this happening
Daniel BertoloneAsked:
Who is Participating?
 
Rick FeeMessaging Engineer - Disaster Recovery EngineerCommented:
If you want to find the sender you will have to look in the host headers.    But since a lot of spammers dynamically generate this it might be hard to stop.    Look in the headers:   Outlook 2007 right click on the message select Message Options...
0
 
Jamie GillespieSenior IT ConsultantCommented:
I would check the headers as mentioned above, please see a link of how to do this;

http://office.microsoft.com/en-us/outlook-help/view-e-mail-headers-HA001093707.aspx

I would also check for malicious software on your network
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Daniel BertoloneAuthor Commented:
Thanks for that guys, I will look into the headers.

As for malware sophos security centre reports all my machines are clean, are there any more steps I could take on my mail server?

I also scan the server regularly with malware bytes
0
 
Alan HardistyCo-OwnerCommented:
If the senders appear to be from an internal user, then the Email sender address has been spoofed.
One way to combat this type of spam is to setup a valid SPF record on your domain and make sure you use SPF record checking when you receive mail as this will filter these sorts of messages out.
If you need more info on SPF record setting up, please let me know, but fo rnow, please visit this link:
http://old.openspf.org/wizard.html
You can check your SPF record (if you have one) at:
http://www.mxtoolbox.com/spf.aspx 
0
 
Daniel BertoloneAuthor Commented:
Thanks foir taht, i will look into spf & let you know
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.