<Sigh!> This is well documented and has been talked about many times. These are from dumb stupid AV programs and/or mail administrators that are allowing virus infections notices to be sent to forged senders. If you do not know by now that Sobig forges the sender e-mail address, . John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Deshwal Chand [mailto:CDD@xxxxxxxxxxxxx] Sent: Monday, September 01, 2003 10:24 PM To: [ExchangeList] Subject: [exchangelist] Getting NDR to the e-mails, which were never sent http://www.MSExchange.org/ Hi List, Since the the outbreak of Sobig.F, I have been receiving lot of NDR from the servers, where I never sent an e-mail. Interestingly, the e-mails are submitted from IP adresses which never belong to me. Any comments! Best Regards, Chand ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')