> Lately our users have been receiving a lot of spam through our
> mail server that seem to be untraceable.
No E-mail is completely untraceable -- at the very least, you can find the computer
that sent it to you.
> There is no "From:" entry in the message headers
The "From:" header is *not* the E-mail address of the sender. It's the E-mail address
the sender *claims* to be. And a spammer doesn't really want people knowing who he
is. Don't bother with the From: header.
> and in many cases no "To:" entries as well.
Same as with the "From:" header; it's whatever the sender wants you to think the "To:"
address was. In the case of spam, it's often another recipient of the spam (an
innocent victim).
> Does anyone know how I can use the message filters to stop these
> messages from being received?
You will need to find something common to all the spam. If there are many different
subjects/bodies, you'll have your work cut out for you. Just be careful to make sure
not to use words/terms that will appear in legitimate E-mail, or those will get
caught, too.
> Or any other methods I can use to filter this spam and
> email spoofs out?
Aside from filtering (or blocking the sender, if you know their IP address, and it all
comes from one/several source(s)), I think you would need to add other software to
handle it. We have our Declude software, and Len has IMGate, both of which can help
(mostly by using DNS lookups against databases such as RBL and DUL that contain IP
addresses of known/suspected spammers).
--
-Scott
Declude: Anti-virus and Anti-spam solutions for IMail. http://www.declude.com
--
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
