In <009301c07752$8d3af9d0$5601a8c0@KEVINCPC>, on 01/01/00 at 12:00 AM,
"Kevin Cross" <[EMAIL PROTECTED]> said:
>Lately our users have been receiving a lot of spam through our mail
>server that seem to be untraceable. There is no "From:" entry in the
>message headers and in many cases no "To:" entries as well. Does anyone
>know how I can use the message filters to stop these messages from being
>received? Or any other methods I can use to filter this spam and email
>spoofs out?
To identify the sender, you need to match IP address and time to
customer login.
This is the signature of one of the plugins of the "Snow White"
W32/hybris virus. The message comes from someone on your system. If you
look at the Q*.SMD file on the queue, you will probably find garbage
characters (not even ASCII) for the FROM and TO addresses. If one of
those garbage characters happens to be an '@', IMail accepts the message,
where it sits in the queue.
I had to manually delete these messages from the queue until I
installed Declude AV, which neatly redirects those messages to the
quarantine directory.
--
-----------------------------------------------------------
Mike Nice <[EMAIL PROTECTED]>
-----------------------------------------------------------
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
