IT Employment

Ask something
Discussion Locked

Spam

0 helpful
3 replies

by mauri_1848

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I has been receiving complains that my server is sending spam. I am pretty sure that no one of my users is sending this kind of messages, so probably one of my PCs has some worm which is sending it. I verify one of these messages, and they are really spreading from my IP.

I has Corporate TrendMicro antivirus (supposedly, the most reliable), so I am really lost of where can I start searching the solution for this problem.

Any thoughts?

3 replies

by advancedgeek

you didn't mention what all you scanned...did you scan all servers/workstations attached to the network? also, i know this may sound dumb, but make sure your definitions are all up to date :D. But if this doesn't work...give a more detailed explanation of your network...there may be more help i could give you (firewall/routers)

by oz_media

Someone MAY have picked up your address and is masking it in the FROM and header fields.

I have seen the same, gone to great lengths wasting time checking PC's and nothing shows up, the emails stop and all is fine again. Your recipent is the one being spammed, you are just being spoofed.

If you post your email address here, or ANYWHERE for that matter, web spiders will crawl and find your address, this can be used to sell your name to a spam list (BIG money) or even spoof YOU as the originator of the email. People have full time careers writing and modifying such spiders, it is a multibillion dollar industry that needs to be fed afterall.

It's VERY common these days, I have had this issue before with someof my users and that's why I NEVER use a company or personal address for ANYTHING web related. Always use a free online account instead.

Just posting your email addy in a discussion will get you poofed, using it as an alias is simply begging for trouble.

by liame

It most likely you being spoofed but as has been said before make sure the definitions are up to date and scan everything. Would also be worth doing a full scan with ad-aware and spybot while you are there.

You dont mention what mail server you are running but make sure that it and its OS are fully patched.

This discussion is closed to new replies.