This seems to be a new practice for spammers, we just spoke about it yesterday. They fake their headers just like the klez, but the only payload is the annoying email. Figure out the sending server from the header and see if it is a domain that you can block.
-----Original Message----- From: Bennett, Joshua [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 10:12 AM To: Exchange Discussions Subject: RE: unknown users e-mails entering environment Could be Klez... -----Original Message----- From: Jon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 8:21 AM To: Exchange Discussions Subject: unknown users e-mails entering environment exchange 5.5, sp4, nt4, sp6a I am seeing a rash of e-mails being delivered to users where the FROM and TO addresses are ex-employees of the company. The users who are getting the e-mails are not on the FROM, TO, or BCC lines. if I send an e-mail to any of the addresses in the e-mail, I will get an undeliverable message stating user not in address book. any sugestions?? thanks Jon _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
