What inbound mail gateway do you have? Our gateways have a rule not to except inbound e-mail where the sender address is our mail domain.
From: Vincent DeSouza [mailto:[email protected]] Sent: Tuesday, August 18, 2009 5:41 AM To: MS-Exchange Admin Issues Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL Implement SPF checks within your Antispam solution and have your DNS updated accordingly. This will get rid of this type of junk. Regards, Vincent From: Markko Meriniit [mailto:[email protected]] Sent: Tuesday, August 18, 2009 12:24 To: MS-Exchange Admin Issues Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL You could look up info about the "Sender ID". Maybe implementing it helps. Markko Meriniit -----Original Message----- From: Murray Freeman [mailto:[email protected]] Sent: Thursday, August 06, 2009 12:28 AM To: MS-Exchange Admin Issues Subject: BLOCKING SPOOFED INTERNAL EMAIL Lately we're getting a lot of sp*m that appear to be coming from our own staff. It's easy to spot, but our sp*m filter isn't catching them. The reason they are easy to spot is the "FROM" has the full address as oppossed to just the display name. Is it possible to create an Outlook rule to block these? Is it possible to create a rule at the Exchange Server level? And finally, if the rule works, will it impact email created in OWA. We're using Outlook 2K3, Exchange 2K3 and Windows Server 2K3. Murray [http://www.nbkcapital.com/AboutUs/MS/PublishingImages/Publication/Email%20Disclaimer.jpg] ----------------------------------------- www.nbkcapital.com<http://www.nbkcapital.com/> ------------------------------------------ Attention This e-mail and any files transmitted with it are intended solely for the use of the individual or entity to which they are addressed. If you have received this e-mail in error, please immediately notify the sending individual or entity by e-mail and permanently delete the original e-mail and attachment(s) from your computer system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Any opinions contained in this message are those of the author and are not given or endorsed by NBK Capital, unless clearly indicated in the message and the authority of the author to so bind NBK Capital is duly verified. No warranty is given as to the legitimacy of e-Mail content transmitted over the Internet.
