>I have a rule set up to catch executable attachments and dump them into a
>special account. I've noticed that I get some messages (that contain
>viruses) that are not addressed to anybody. I've looked in the header for
>the messages and can not find anywhere that a user on my domain is
>specified. Anyone have an idea how these messages are getting in?
All E-mail is addressed to someone. You just may not see the address in
the headers. Your user could be "Bcc'd" (blind carbon copy), where their
E-mail address won't appear in the headers.
The only way you will get mail that is not addressed to users on your
server is if it is being relayed (IE a user of yours is sending it out, in
which case it should be sent to another mailserver), or another domain is
misconfigured and sending their mail to your server (in which case it
should bounce).
Klez will usually forge the E-mail headers, so you will often not see any
recognizeable address in the headers.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
