How can I tell if my exchange server 2003 is being spoofed?

25 pts.
Tags:
Anti-spoofing
Exchange 2003
Exchange 2003 security
Exchange security
Spoofing
how can I tell if my exchange server is being spoofed

Software/Hardware used:
Exchange server 2003
ASKED: July 29, 2010  7:10 PM
UPDATED: July 30, 2010  5:26 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

It’s not your server that will get spoofed, it is the email addresses of your user’s email accounts that will get spoofed. If your users are reporting that they are getting bounce-back messages for email they never intentionally or knowingly sent, they are getting spoofed.

Discuss This Question: 5  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Aguacer0
    Technochic is correct. E-mail addresses gets forged. You just want to confirm you are not being "relay" which will eventually add you to a blacklist. A blacklist is basically a list of IP addresses of where SPAM probably originates from. If you are on any of these lists, certain domains will classify you as SPAM if they happen to utilize a blacklist that you are listed on.
    8,135 pointsBadges:
    report
  • Schmidtw
    You can tell by getting an e-mail filtering or proxy service. If either of those put up flags, you probably have a problem on your hands. Hope this helps! -Schmidtw
    11,330 pointsBadges:
    report
  • Swoodsides
    Okay, this I understand. So, how do I stop it? I am getting emails sent all day long and everything that I check in my exchange server looks good.
    25 pointsBadges:
    report
  • Technochic
    Check to make sure you do not have an open relay on your exchange servers. Outside of that it is difficult to completely stop spoofing. Here is an article that may be helpful.
    57,010 pointsBadges:
    report
  • Swoodsides
    Thank you, Technochic. I looked over the link you sent and I went over it thoroughly and found two minor adjustments that had been changed from the defualt setting. I am going to sit here and watch for a while and see what happens and will update you. Thank you, Scott
    25 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following