Perhaps a virus with a fake from address sent to someone else in your organization.
This happens with Klez, even though I don't think that is a Klez subject line.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 18, 2002 4:11 PM
To:
Klez. Someone who is infected with it has his name in their address book.
When Klez sends the virus, it grabs a name from the address book and then
uses it as the FROM
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 18, 2002 1:11 PM
To:
, 2002 8:15 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
Open telnet session to your exchange server and test it using mail to / mail
from command. Lot of help on it also available on Microsoft KB , search for
open relay.
-Original Message-
From: Rama Arumugam
AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
You could start by reading a description of what klez actually does, paying
special attention to the bit about forging emails from totally innocent
people who have nothing to do with the virus infection.
-Original
www.antivirus.com Read up on Klez, then worry if you'd like. It's certainly
not an Exchange security breach.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 10:23 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
Read RFC2821 and RFC2822.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 10:19 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
What do you mean by someone else's machine or someone used my
boss's
To: Exchange Discussions
Subject: RE: Exchange Security Breach
What do you mean don't worry about? By the way we have NetShield and
GroupShield both running on our exchange server and we do
block most of the
extensions (.exe,.vbs, etc.) from coming in.
Rama Arumugam
Network Administrator
Simple : some one else over the internet sent out an e-mail using his e-mail address .
The bounced mail came to him. Its also possible if some one is relaying through your
server.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002
Subject: RE: Exchange Security Breach
Simple : some one else over the internet sent out an e-mail using his e-mail
address . The bounced mail came to him. Its also possible if some one is
relaying through your server.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Sent
Discussions
Subject: RE: Exchange Security Breach
How do I find out if some one is in fact relaying through our server?
Thanks!
Rama Arumugam
Network Administrator
Wire DynamiX.com
(253) 395-4527
-Original Message-
From: Gagrani, Kishore [mailto:[EMAIL PROTECTED]]
Sent: Thursday
You may also use third party open relay testers over internet. There are many , just
search for open relay in your google or yahoo .
-Original Message-
From: Gagrani, Kishore
Sent: Thursday, September 19, 2002 11:15 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
PROTECTED]]
Sent: Thursday, September 19, 2002 8:18 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
Could also be klez virus (or variant) on someone else's machine as well
which used your boss' email address
-Original Message-
From: Gagrani, Kishore [mailto:[EMAIL
It's Klez. Don't worry about it.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Posted At: Thursday, September 19, 2002 09:28 AM
Posted To: MSExchange Mailing List
Conversation: Exchange Security Breach
Subject: Exchange Security Breach
Hello
Meunier [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 8:20 AM
To: Exchange Discussions
Subject: RE: Exchange Security Breach
It's Klez. Don't worry about it.
-Original Message-
From: Rama Arumugam [mailto:[EMAIL PROTECTED]]
Posted At: Thursday, September 19, 2002
Subject: RE: Exchange Security Breach
What do you mean by someone else's machine or someone used my boss's email
address? Do you mean some one on the internet has an email address (as an
alias may be??)that matches my boss's email address? Thanks!
Rama Arumugam
-Original Message
PROTECTED]]
Sent: Thu 19/09/2002 16:22
To: Exchange Discussions
Cc:
Subject: RE: Exchange Security Breach
What do you mean don't worry about? By the way we have NetShield and
GroupShield both running on our exchange server
]]
Posted At: Thursday, September 19, 2002 10:23 AM
Posted To: MSExchange Mailing List
Conversation: Exchange Security Breach
Subject: RE: Exchange Security Breach
What do you mean don't worry about? By the way we have
NetShield and GroupShield both running on our exchange server
17 matches
Mail list logo