RE: unknown users e-mails entering environment
Could be Klez... -Original Message- From: Jon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 8:21 AM To: Exchange Discussions Subject: unknown users e-mails entering environment exchange 5.5, sp4, nt4, sp6a I am seeing a rash of e-mails being delivered to users where the FROM and TO addresses are ex-employees of the company. The users who are getting the e-mails are not on the FROM, TO, or BCC lines. if I send an e-mail to any of the addresses in the e-mail, I will get an undeliverable message stating user not in address book. any sugestions?? thanks Jon _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: unknown users e-mails entering environment
What do the emails look like (subject, body) - are they similar? John J. Steniger -Original Message- From: Jon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 8:21 AM To: Exchange Discussions Subject: unknown users e-mails entering environment exchange 5.5, sp4, nt4, sp6a I am seeing a rash of e-mails being delivered to users where the FROM and TO addresses are ex-employees of the company. The users who are getting the e-mails are not on the FROM, TO, or BCC lines. if I send an e-mail to any of the addresses in the e-mail, I will get an undeliverable message stating user not in address book. any sugestions?? thanks Jon _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: unknown users e-mails entering environment
This seems to be a new practice for spammers, we just spoke about it yesterday. They fake their headers just like the klez, but the only payload is the annoying email. Figure out the sending server from the header and see if it is a domain that you can block. -Original Message- From: Bennett, Joshua [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 10:12 AM To: Exchange Discussions Subject: RE: unknown users e-mails entering environment Could be Klez... -Original Message- From: Jon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 8:21 AM To: Exchange Discussions Subject: unknown users e-mails entering environment exchange 5.5, sp4, nt4, sp6a I am seeing a rash of e-mails being delivered to users where the FROM and TO addresses are ex-employees of the company. The users who are getting the e-mails are not on the FROM, TO, or BCC lines. if I send an e-mail to any of the addresses in the e-mail, I will get an undeliverable message stating user not in address book. any sugestions?? thanks Jon _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
