Spamming myself?

[yambabe]

Can anyone help me with a couple of email-related queries?

We have MS Exchange running on our server, with 5 email users whose mail is routed to various terminal machines where they pick it up on Outlook 2003. Domain is hosted by an external ISP for us who presumably forward the mail in to us.

Recently we have noticed 2 problems.

1 - I am getting spam email into one of the accounts on a regular basis, however I cannot use my junk mail filter on it because the sender is the owner of the account! So if the account is say fred@myco.com, I am getting the same email over and over again in fred's inbox but it has also been sent by fred@myco.com!

2 - Another of our users is getting emails returned to her that have been rejected by other people's AV as they contain viruses. However, she has not sent the mail in the first place. It looks like someone has hijacked her email address somewhere and is using it to send malicious emails to others. Is there anything we can do about this?

Thanks in advance.....
____________________
Sod falling in love, I wanna fall in chocolate.

[Suzuki]

Check the headers of the email. Whilst it might say that the mail is coming from the account that's receiving it, it might just be spoofed and *actually* be being sent by somebody else, which you can then block.

As for question 2, no there's nothing you can do about it. That's the trouble with email, anybody can pretend to be anybody they like. Only way to tell if it's really that person is to look carefully at the headers.

PM/email me the headers from one mail if you want me to have a look at them for you.
____________________
<Simple> no I'm shaven Jon
<Simple> it is a big enough hole.. I'll leave it now
Ride: 1999 Suzuki GSXR600 (yellow/black) IRC: Stats - Relationship Map