We are getting a ton of spam sent from our domain to our domain. for example:

the emails read:

to: us***@abc.com
from: us***@abc.com

I read online that adding a SPF record to our DNS forward lookup zone would
help but we are still being bombarded with this stuff. Any ideas on what to
do?

thanks
R

Implement antispam software, an antispam appliance, or a hosted antispam
service.
Show quoteHide quote

Start by mentioning your Exchange Server version.

Show quoteHide quote

Bharat Suneja [MSFT] <bsun***@online.microsoft.com> wrote:
Better yet, start by getting me a cappuccino. *Next* we can get into the
Exchange & spam thing.
Show quoteHide quote

Roman B. wrote:
Doesn't matter so much who it's from - if it isn't you, it's a
dead/madeup/harvested phony email address anyways. Exchange 2003 and on
have RBL lookup capabilities built-in. That will help to start. You
might want to use IP based rejection to lock out certain large netblocks
from Asia/Russia just to keep some down.

Personally, I use MDaemon as a mail gateway between Exchange and the
Internet - great SpamAssassin spam scoring, Bayesian, RBL, outstanding
logging both logfile and realtime (you can watch the SMTP traffic logged
before your eyes, so much more useful than anything Exchange has), I can
insert MDaemon and remove 85% of the spam users are receiving.

Venger

Alt-N Technologies has a product that I use in front of my Exchange
server that cuts my spam by 95%.  The products are SecurityGateway and
Protection Plus. The Protection Plus provides Recurrent Pattern
scanning of the emails as well as virus protection. You can find some
information about it on their website.

http://www.altn.com/Products/SecurityGateway-Email-Firewall/

http://www.altn.com/Products/ProtectionPlus/





On Jan 22, 10:31 am, Roman B. <Rom***@discussions.microsoft.com>
wrote:
Show quoteHide quote

Its not mail that's coming from you (obviously) but is quite easy to make an
email look like it comes from someone else. Its a spammer/virus/bot somewhere
on the internet thats just sending spam mail. In my experience the best form
of anti spam is to use an online hosted service and let them deal with the
overhead of processing your email, then lock down your firewall on port 25 so
that no one else can make a direct connection to you on port 25.
James.
Show quoteHide quote

Am I missing something here? Why can't you just add *@abc.com to your block
senders list? The blacklist only applies to email originating from outside
your domain (i.e. unauthenticated, anonymous conections). That filter won't
affect any users sending outbound email or authenticated emails. If you are
using email from inside your LAN or even over the internet using OWA, RPC
over HTTP, VPN or your smart phone, you are authenticating and sending from
your Exchange server.

Show quoteHide quote

Exchange accept mail from two domain names
Disclaimer EventSink Trigger
How to enable active sync with ssl feature in Exchnage 2003
Public Folder Contacts Issue
Exchange 2003 DR Testing
fail to move Exchange databases to a Windows Storage server 2003
Force a 2007 CA to use a particular GC
Exchange Data Recovery
Why can't I see all the data fields in Exchange when I link from MS Access?
Exchange 2003 and Out of Office Replies