RE: Unussual message notice

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 24 Jan 2004 11:39:06 -0800

A spammer is using a forged from address which just happens to be a user on
your server. Happens all the time. Nothing you can do about it except review
the headers to ensure it did not come from your server.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -----Original Message-----
> From: KEN MORRIS [mailto:KMORRIS@xxxxxxx]
> Sent: Saturday, January 24, 2004 11:29 AM
> To: [ExchangeList]
> Subject: [exchangelist] Unussual message notice
> 
> http://www.MSExchange.org/
> 
> Hello,
> I have one user who has just started receiving the following return
> message
> notices:
> 
> Your message did not reach some or all of the intended recipients.
> 
>   Subject: this is amazing, great for guys
>   Sent: 24/01/2004 12:09 AM
> 
> The following recipient(s) could not be reached:
> 
>   nancy17057@xxxxxxx on 24/01/2004 12:12 AM
>   The e-mail account does not exist at the organization this message was
> sent
> to. Check the e-mail address, or contact the recipient directly to find
> out
> the correct address.
>   < rly-yi01.mx.aol.com #5.1.1 SMTP; 550 MAILBOX NOT FOUND>
> 
>   nancy1885@xxxxxxx on 24/01/2004 12:12 AM
>   The e-mail account does not exist at the organization this message was
> sent
> to. Check the e-mail address, or contact the recipient directly to find
> out
> the correct address.
>   < rly-yi01.mx.aol.com #5.1.1 SMTP; 550 MAILBOX NOT FOUND>
> 
>   nancy1re@xxxxxxx on 24/01/2004 12:12 AM
>   The e-mail account does not exist at the organization this message was
> sent
> to. Check the e-mail address, or contact the recipient directly to find
> out
> the correct address.
>   < rly-yi01.mx.aol.com #5.1.1 SMTP; 550 MAILBOX NOT FOUND>
> 
> We know that he did not send out any messages, and that our server is not
> relaying.
> 
> Does anyone have suggestions on where else to look to find out why this is
> being received?
> 
> Thanks
> Ken
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------



Other related posts: