• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Is this Phishing?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Is this Phishing? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Is this Phishing? - 9.Jan.2006 8:02:53 AM   
prashanth15

 

Posts: 7
Joined: 14.Dec.2005
Status: offline
Hi,
I have Exchange 2000 running on Windows 2000 Server with Latest security patches from microsoft.
Say for example the domain is xyz.com

I keep receiving emails from mail@xyz.com,webmaster@xyz.com

but there is no mail and webmaster accounts created in active directory.

My server is not open relay also.

how to prevent this?

Appreciate your help on this.

Regards,
Prashanth





Post #: 1
RE: Is this Phishing? - 9.Jan.2006 8:37:52 PM   
ashok

 

Posts: 19
Joined: 9.Jan.2006
Status: offline
Prashant,

We're also having the same issue, however out email filter catches this and drops the requests. I would still want to know how this is done and any possible way to correct it.

Ash.

(in reply to prashanth15)
Post #: 2
RE: Is this Phishing? - 9.Jan.2006 9:55:04 PM   
MAR

 

Posts: 9
Joined: 22.Dec.2005
Status: offline
Yes it is a phishing technique. The from field is spoofed. Check the internet header(s) for the source IP (which may or may not be spoofed). One way to prevent this is to add a specific rule. For example, you can add a rule to drop/quarantine any msgs from webmaster/admin/etc. at the gateway. If you dont have any appliances in the DMZ that handle filtering, you can address this problem at the server level as well.

(in reply to prashanth15)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Is this Phishing? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter