Question

Notes to notes spoof

Exchange, Spam, Brightmail, CipherTrust, ClearSwift, McAfee, MessageLabs, Postini, Rockliffe, Spam Assassin, SurfControl, Symantec, TrendMicro, Security

I just had a question from one of our senior managers asking about a potential vulnerability. He heard that there was a way to spoof from a notes email client to another within the same domain.

I researched but could not find anything proving or disproving this information. Any help would be appreciated.

Without using development (and admin rights), the most you can do is spoof internet mail. All notes to Notes mail will include the name from the ID of the person sending it. So I can send an email from Joe Manager but it will include Sent By Bruce Lill. for internet mail, just change the internal email address on your location doc. You can restrict this with policies and admin configuration.