>Below is an email that one of my clients received. As you can see his domain
>(mepcorp.com) is an onsite Exchange server. The odd part about this email is
>that it appears to have been relayed through our email server
>(smtp.intercityweb.com) the return address is [EMAIL PROTECTED]
>(very bottom of message).
Someone sent an E-mail to [EMAIL PROTECTED] from
[EMAIL PROTECTED] They were able to do this because you can put
ANY "From:" address you want into an E-mail.
Note that the E-mail was sent *to* a user on your server. Relaying is
using your mail server to send to *other* mail servers (not to accounts
local on your server).
So, assuming that the E-mail was being sent to one of your users, the only
odd thing seems to be that they sent it using [EMAIL PROTECTED] --
but, that's easily explainable (it's a forged header).
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
