You are brgeneral and this hit your system there? If that is correct I don't see that as a relay, I see it as someone spoofing your 'from' address space. Very common.
If you want to stop your Cuda from accepting this kind of email you want to look at the 'sender spoof' setting in your Cuda. But be aware a lot of so called legit email will spoof your from address. For example amazon.com order confirmations do, or at least used to last time I looked. From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] Sent: Monday, February 04, 2013 10:14 AM To: MS-Exchange Admin Issues Subject: Spam relay problem What steps should I take to troubleshoot this type of relay? That source IP is not ours. X-ASG-Debug-ID: 1359697244-058e841d914e4a30001-uhLaEQ Received: from biblio (lvelizy-156-45-11-122.w80-11.abo.wanadoo.fr<http://lvelizy-156-45-11-122.w80-11.abo.wanadoo.fr> [80.11.32.122]) by securemail1.brgeneral.org<http://securemail1.brgeneral.org> with ESMTP id etJOQQqUPhHTkKXN for <vacacu2ped...@gmail.com<mailto:vacacu2ped...@gmail.com>>; Thu, 31 Jan 2013 23:40:44 -0600 (CST) X-Barracuda-Envelope-From: ad...@brgeneral.org<mailto:ad...@brgeneral.org> X-Barracuda-Apparent-Source-IP: 80.11.32.122 MIME-Version: 1.0 From: ad...@brgeneral.org<mailto:ad...@brgeneral.org> To: vacacu2ped...@gmail.com<mailto:vacacu2ped...@gmail.com> Date: 1 Feb 2013 06:49:58 +0100 Subject: 69.2.47.143 X-Barracuda-Connect: lvelizy-156-45-11-122.w80-11.abo.wanadoo.fr<http://lvelizy-156-45-11-122.w80-11.abo.wanadoo.fr>[80.11.32.122] X-Barracuda-Start-Time: 1359697244 X-Barracuda-URL: http://securemail1.brgeneral.org:8000/cgi-mod/mark.cgi X-Barracuda-Orig-Rcpt<http://securemail1.brgeneral.org:8000/cgi-mod/mark.cgiX-Barracuda-Orig-Rcpt>: vacacu2ped...@gmail.com<mailto:vacacu2ped...@gmail.com> X-ASG-Orig-Subj: 69.2.47.143 X-Virus-Scanned: by bsmtpd at brgeneral.org<http://brgeneral.org> X-Barracuda-Spam-Score: 0.14 X-Barracuda-Spam-Status: No, SCORE=0.14 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=MISSING_MID, NO_REAL_NAME X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.121486 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.14 MISSING_MID Missing Message-Id: header 0.00 NO_REAL_NAME From: does not include a real name Running Barracuda Spam/Email filter appliances and Exchange 2010 SP1 -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist