Look at the headers. I saw the same message this week and it looked like it came from one of our execs. - It was just spoofed.
Kjasa -----Original Message----- From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 05, 2004 11:30 AM To: Exchange Discussions Subject: Re: Re-post ;clarification LOLOL, not that I'm looking for it I just want to make sure its not in the store. Ok well I installed IMF last night , want to see if the Spam will drop, my users are now averaging 10-12 , Is this realtime blackhole a common thing now? any pro's /cons to it Jean-Paul Natola Systems Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED] ----- Original Message ----- From: "Ed Crowley [MVP]" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, October 05, 2004 12:11 PM Subject: RE: Re-post ;clarification > Exchange does not validate the sender's e-mail address. That's what > realtime blackhole lists try to do, so you could implement one of > those on yhour perimeter network if you want that capability. It > looks to me as if the message made it to her Inbox without the > infected attachment. Your quarantine area might have it, but I don't > know why you'd want to go looking > for it. > > Ed Crowley MCSE+Internet MVP > Freelance E-Mail Philosopher > Protecting the world from PSTs and Bricked Backups!T > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jean-Paul > Natola > Sent: Tuesday, October 05, 2004 7:19 AM > To: Exchange Discussions > Cc: Exchange Discussions > Subject: Re-post ;clarification > > I think I was rejected due to HTML > > > Please everyone, > > > > A little patience is all I ask , bear with me till I fully grasp the meaning > of these notices; > > > > Does this mean that it actually made to her inbox? If so why was it > not caught prior to it reaching the inbox? > > > > And the other question is why did my Exchange allow an email fom an > "Unknown sender" > > > > location of the infected item: Ellen Themmen/Inbox > > Sender of the infected item: Unknown Sender > > Subject of the message: Mail Delivery (failure [EMAIL PROTECTED]) > The attachment "message.scr" was Quarantined for the following reasons: > > The file was unrepairable. Virus Info: > > Virus [EMAIL PROTECTED] was found > > > > > > > Jean-Paul Natola > Network Administrator > Information Technology > Family Care International > 588 Broadway Suite 503 > New York, NY 10012 > Phone:212-941-5300 xt 36 > Fax: 212-941-5563 > Mailto: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english > To unsubscribe send a blank email to %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
