Slow down MacGyver. Lets not go worst case scenario on him just yet. While this is always possible, the most likely reason is Klez. I see this every day [1]
[1] No open relay jokes Andy -----Original Message----- From: Gagrani, Kishore [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 8:15 AM To: Exchange Discussions Subject: RE: Exchange Security Breach???? Open telnet session to your exchange server and test it using mail to / mail from command. Lot of help on it also available on Microsoft KB , search for open relay. -----Original Message----- From: Rama Arumugam [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 11:10 AM To: Exchange Discussions Subject: RE: Exchange Security Breach???? How do I find out if some one is in fact relaying through our server? Thanks! Rama Arumugam Network Administrator Wire DynamiX.com (253) 395-4527 -----Original Message----- From: Gagrani, Kishore [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 8:11 AM To: Exchange Discussions Subject: RE: Exchange Security Breach???? Simple : some one else over the internet sent out an e-mail using his e-mail address . The bounced mail came to him. Its also possible if some one is relaying through your server. -----Original Message----- From: Rama Arumugam [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 10:28 AM To: Exchange Discussions Subject: Exchange Security Breach???? Hello everyone, One of my users (unfortunately it's my Supervisor) got an alert from Group Shield saying that his attachment (.exe) was blocked. But he swears that he didn't send out any emails. Couldn't argue with that. Not only that, we were unable to find anything on his Sent Items folder either. Here is what he received on his inbox from Postmaster **************************************************** -----Original Message----- From: postmaster [mailto:[EMAIL PROTECTED]] <mailto:[mailto:[EMAIL PROTECTED]]> Sent: Friday, September 13, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: Undeliverable mail--"Helvetica" The following mail can't be sent to [EMAIL PROTECTED]: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Helvetica The attachment is the original mail **************************************************************************** ***** I just can't seem to find any information on this on the internet. "Helvetica" is a font. That's all I've got so for. Could this be a Security breach? Is someone using my exchange server? Has anyone received any messages like this before? Please help. Any input is welcome! Thanks everyone! rama _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
