Spam Question

[Flint]

It seems that someone has decided to use our domain name
as the send from address to send spam with an invalid user
id (i.e. 124433@...com). Our server doesn't allow
relaying. I am getting a lot of undeliverables because
the bounce backs are going to a an invalid e-mail address
on our domain, which the sender used (i.e.
124433@...com). Is there any way to prevent this?
Exchange 5.5 SP4.

Any assistance would be appreciated.

[Ed Crowley [MVP]]

You could file a suit.
--
Ed Crowley
MVP - Exchange
Compaq Computer
"Not as good looking as Rich M."
"Flint" <sies...@hotmail.com> wrote in message
news:3f3101c1b65d$cc00c1e0$9be62ecf@tkmsftngxa03...

[Flint]

Don't know who the real sender is. Looking for a way to
prevent it.

>.
>

[Legless]

"Flint" <Sies...@hotmail.com> wrote in message news:<4af701c1b8a7$29e92900$39ef2ecf@TKMSFTNGXA08>...

> Don't know who the real sender is. Looking for a way to
> prevent it.
>

Not really anything you can do prevent this other than track the
originator down. I had the same problem a while back where someone had
a grudge against one of my clients. Only thing I could do was delete
the replies as they arrived on the server.

I suggest you create a mailbox for this mythical user and examine the
spam itself. If it's commercial stuff there should be some way to
figure out who it's comming from.

e.g. www.porno.net or whichever service they're trying to advertise.
Then get in touch wuth them. I doubt if they'll help you or even speak
to you but it's worth a shot.

If you can examine the headers and find the IP of the originator of
the spam, a whois of the IP address *might*, if you're very lucky lead
to who's sending it. If you're unlucky you'll just end up with a
dialup IP address.

A good, fast, free whois client ( Ultra Whois ) is available from
AnalogX. www.analogx.com.

Sorry I couldn't help more. I know what this is like and it's really
no fun.

Cheers

Legless