Announcement

Collapse
No announcement yet.

Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

    From time to time I receive some spam. The strangest thing is that those emails say that they orignate from my domain?
    Has anyone met with st like this?

    Microsoft Mail Internet Headers Version 2.0
    Received: from ACaen-152-1-11-40.w83-115.abo.wanadoo.fr ([83.115.2.40]) by mydomain.com with Microsoft SMTPSVC(6.0.3790.1830);
    Thu, 3 May 2007 17:47:06 +0100
    X-Originating-IP: [82.280.1.89]
    X-Originating-Email: [[email protected]]
    X-Sender: [email protected]
    Return-Path: [email protected]
    Received: (qmail 3093 by uid 24; Thu, 3 May 2007 06:46:55 +0100
    Message-Id: <[email protected]fr>
    To: <[email protected]>
    Subject: RE: MedHelp 94689
    From: Canadian Doctor Penelope <[email protected]>
    MIME-Version: 1.0
    Importance: High
    Content-Type: text/html
    X-OriginalArrivalTime: 03 May 2007 16:47:08.0546 (UTC) FILETIME=[B04DDE20:01C78DA2]
    Date: 3 May 2007 17:47:08 +0100

    I use Exchange 2003.

  • #2
    Re: Canadian Doctor, RE: MedHelp

    Reported to admins for topic change and move to Exchange 2003 forum

    Michael
    Michael Armstrong
    www.m80arm.co.uk
    MCITP: EA, MCTS, MCSE 2003, MCSA 2003: Messaging, CCA, VCP 3.5, 4, 5, VCAP5-DCD, VCAP5-DCA, ITIL, MCP, PGP Certified Technician

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

    Comment


    • #3
      Re: Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

      Thread moved.
      next time use a correct Topic Title
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

        This is 'usual', I'm afraid.

        It usually happens when a PC is infected.

        The PC won't necessarily be in your organization. The virus has the ability to open up an address book on the infected PC. The virus can construct an email and send itself to any of the email addresses it harvests.

        To add authenticity, the virus will choose one of the addresses it finds to pose as the sender address. This is done because it is likely that the other addressees will know of the sender address, and is more likely to open the email, infecting that PC.

        What you are seeing are cases where your domain is used as the sender address. If the recipient address no longer exists, then your sender address\domain will get the NDR.

        robbyb

        Comment


        • #5
          Re: Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

          Is there anyway of stopping it? Our company is getting around 4 emails per user per day offering viagra etc from our domain name!!

          Comment


          • #6
            Re: Receiving Spam originated for own domain? (WAS:Canadian Doctor, RE: MedHelp)

            I'd say, probably not!

            What you are experiencing is usually as a result of what I've described below.

            It is often because of infected PC's that are not under your control. It could be your friend's home PC. Because he's got your email address in his address book, any so enabled virus can open up his address book, and send emails out, posing as your domain.

            About all that you can do is to encourage people to virus check their PC's. Ask your friends to virus check their PCs. Send a note out to your users, asking them to ask their friends to virus check their PCs.

            Apart from that, you'll probably need to consider some kind of effective Anti Spam service.

            robbyb

            Comment

            Working...
            X