Search TechNet for ResolveP2, you can prevent headers received via the IMS
from resolving to a GAL entry.

Chris
-- 
Chris Scharff
Senior Sales Engineer
MessageOne
If you can't measure, you can't manage! 


> -----Original Message-----
> From: Bourque Daniel [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, January 18, 2002 4:38 PM
> To: Exchange Discussions
> Subject: e-mail anti-spoofing
> 
> 
> 
> Ok, I just had to work on an e-mail message received by one 
> of our customer. The e-mail From address was from our company 
> and the customer was really on the impression that we were the sender.
> 
> Since I know that a from address mean nothing and can be 
> spoof by anybody, looking at the smtp header, I was able to 
> track back the msg to an anonymiser site and the case was close... 
> 
> Doing some tests, I have also realise that we could be the 
> target of the same type of spoofing but this time, if the 
> from address is a valid internal smtp address, the from 
> address will be convert by Exchange to the internal version 
> and the user will think that the message come from the inside...  
> 
> Now, the V-P is receiving an e-mail from what he think his my 
> boss and all Hell break loose...
> 
> 
> So, here is my question:
> 
> Is there a setting in Exchange 5.5 IMS connector to block any 
> e-mail with a FROM address existing in the GAB?  A sort of 
> anti-spoofing rule as we use on a router/Firewall to block 
> internal IP address coming from the outside?
> 
> Any software that can do that?
> 
> 
> 
> Daniel Bourque
> Analyste - Centre d'Assistance Technique
> Loto-Qu�bec
> [EMAIL PROTECTED]
> (514) 499-5056
> 
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to