Exchange Server Forums

Is there a way to prevent spammers from using our email address?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> General >> Is there a way to prevent spammers from using our email address?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Is there a way to prevent spammers from using our email... - 26.Sep.2008 2:08:39 AM

PeterTaps

Posts: 3
Joined: 13.Sep.2008
Status: offline

Folks,

Someone is sending spam with "From" field that contains an email address from our domain. If the spam is rejected by a host, this "From" field is used as the return address. As a result, we end up receiving an "undelivered" message.

Here is an example of an undelivered message:

--------------
Received: from localhost (unknown [127.0.0.1]) by mail.ru.knightfrank.com
(Postfix) with ESMTP id 77C5D26F06     for <petgord34truew@ru.knightfrank.com>;
Thu, 25 Sep 2008 16:09:22 +0400 (MSD)
Received: from mail.ru.knightfrank.com ([127.0.0.1])
by localhost (mailgate [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 04430-10 for <petgord34truew@ru.knightfrank.com>;
Thu, 25 Sep 2008 16:09:22 +0400 (MSD)
Received: from [92.83.90.144] (unknown [92.83.90.144])
       by mail.ru.knightfrank.com (Postfix) with ESMTP id C893B26EFB
       for <petgord34truew@ru.knightfrank.com>; Thu, 25 Sep 2008 16:09:21 +0400 (MSD)
Message-ID: <000601c91f07$03c07906$388dc5a7@yadqdliv>
From: =<admin@mycompany.com>
...
----------------

As you can see, the spam originates from 92.83.90.144 and it is sent with a From field of our email address.

I have checked that IP address 92.83.90.144 is listed in spamhaus.

The question is, is there anything I can do to prevent such unauthorized use of our email addresses? What are my options?

Thank you in advance for your help.

Regards,
Peter

Post #: 1

Featured Links*

RE: Is there a way to prevent spammers from using our e... - 26.Sep.2008 8:26:18 AM

mark@mvps.org

Posts: 3757
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline

There is nothing, not one damn thing, you can do to stop anyone from sending a message that purports to come from an address that you own.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to PeterTaps)

Post #: 2

RE: Is there a way to prevent spammers from using our e... - 27.Sep.2008 2:01:14 PM

dreambig2212

Posts: 36
Joined: 16.Sep.2008
Status: offline

Hi,

But there is an option by which you can stop getting these ndr but it will effect all your users. So I dont think that there is any best way to stop this.

_____________________________

New To exchange

(in reply to PeterTaps)

Post #: 3

RE: Is there a way to prevent spammers from using our e... - 27.Sep.2008 3:44:09 PM

mark@mvps.org

Posts: 3757
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline

Those NDRs you're getting in are either legitimate NDRs from people who, in good faith, think you've been sending messages or actual spam. Best thing you can do is to deploy an anti spam engine. Even then you're not going to get them all.

Stop thinking narrowly about these things; they are all subject to your overall anti-spam policy.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to dreambig2212)

Post #: 4