Ok, I just had to work on an e-mail message received by one of our customer. The e-mail From address was from our company and the customer was really on the impression that we were the sender.
Since I know that a from address mean nothing and can be spoof by anybody, looking at the smtp header, I was able to track back the msg to an anonymiser site and the case was close... Doing some tests, I have also realise that we could be the target of the same type of spoofing but this time, if the from address is a valid internal smtp address, the from address will be convert by Exchange to the internal version and the user will think that the message come from the inside... Now, the V-P is receiving an e-mail from what he think his my boss and all Hell break loose... So, here is my question: Is there a setting in Exchange 5.5 IMS connector to block any e-mail with a FROM address existing in the GAB? A sort of anti-spoofing rule as we use on a router/Firewall to block internal IP address coming from the outside? Any software that can do that? Daniel Bourque Analyste - Centre d'Assistance Technique Loto-Qu�bec [EMAIL PROTECTED] (514) 499-5056 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
