1) Our Vice President started getting these about a week ago. As many as 6 a day. So she asked me what was going on. I told her there was a spammer using her email address in the from field and there was nothing i could do about that other that block the AOL bounce messages. Am i correct here in saying that? Here is the bounce...
****** 67.114.195.162 is not on my network nor is it my user******
****** It appears to me that this user above 67.x.x.x is performing a dictionary attack on AOL with my users email address as the sender******
The original message was received at Mon, 29 Nov 2004 12:37:47 -0500 (EST) from adsl-67-114-195-162.dsl.pltn13.pacbell.net [67.114.195.162]
Since 67.114.195.162 isn't your IP, it isn't you causing the problem.
2) Then she replies back to me saying that she contacted AOL second level support.... this is what they told her...
They said we potentially have a port open and/or a worm/Trojan that is allowing this. They said we should run a full virus scan on every computer in the network to make sure they are clean.
Either they are clueless, or your VP wasn't able to get the right information across to the support personnel. The E-mail didn't come from your network.
They also said you can go to postmaster.aol.com and set up a feedback loop so you will be notified anytime anyone from our network sends something into aol that they consider spam. They said it will create a whitelist that will let you track the sender as well as being notified of how often this is happening.
That is correct.
Can someone confirm that my explanation to her is valid?
It is. :)
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---- This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
