Home > Ask the Microsoft Exchange Experts > Bradley Dinerman: Exchange Server and SBS Questions & Answers > Problems with email spoofing on SBS 2003
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Problems with email spoofing on SBS 2003

>
QUESTION:
I am currently running Small Business Server 2003 and have an Open Relay Filter running on my Exchange server and SMTP connector -- both of which run locally. I've recently noticed a problem where the From field claims to be a local user sending spam and the To field is the same local user. How do I prevent spam being sent by local users?


RELATED CONTENT
Bradley Dinerman: Exchange Server and SBS
Configuring the default recipient policy in an Exchange 2003 environment
Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007
Migrate Exchange Server mailbox data to a .PST file
Configure a POP3 connector to receive external email on SBS 2003
Configure SMTP connection limits in Exchange Server 2003 and SBS
Move public folder data from Exchange Server to a local share
Windows SBS and Exchange Server security configuration best practices
Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003
Perform an SMTP Telnet to test an outgoing Exchange server connection
Set up Outlook to use POP3 email and Exchange calendars on Windows SBS

Small Business Server
Exchange Mailbag: POP3 settings and Outlook issues
Exchange Server 2003 collects email from only specific POP3 domains
Prevent duplicate appointments in Microsoft Outlook 2003 calendar
Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007
Configure a POP3 connector to receive external email on SBS 2003
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Configure SMTP connection limits in Exchange Server 2003 and SBS
Windows SBS and Exchange Server security configuration best practices
Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003
Perform an SMTP Telnet to test an outgoing Exchange server connection

Spam and virus protection
Nine Exchange Server risks you shouldn't overlook
How to install Forefront Security for Exchange Server
Block Web beacons and protect OWA users from spam
Controlling spam in Exchange 2007 at the edge transport server level
How file-level antivirus software can harm your Exchange Server
Exchange Insider e-zine
Securing your Exchange Server 2007 journaling archives
Troubleshooting Outlook Web Access issues on a 64-bit system
Microsoft Exchange Server security dos and don'ts
Troubleshooting Microsoft Exchange Server Event ID error 6009
Spam and virus protection Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
backscatter spam  (SearchExchange.com)
greylist  (SearchExchange.com)
image spam  (SearchExchange.com)
KnujOn  (SearchExchange.com)
Sender ID  (SearchExchange.com)
spam confidence level  (SearchExchange.com)
spamblock  (SearchExchange.com)
spim  (SearchExchange.com)
tarpitting  (SearchExchange.com)
Vouch by Reference (VBR)  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


Bradley Dinerman EXPERT RESPONSE FROM: Bradley Dinerman

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site
ANSWERED May 2009:
There are very few, if any, situations that require your Exchange server to be an open relay. For most SBS scenarios, you will not need to permit any relay, even from workstations. Therefore, you can configure your default SMTP virtual server in the Exchange System Manager to deny relay from all hosts, except for those that you may specify.

The situation that you describe, in which the From field of messages claims to be from users on your network, is known as "spoofing." This is a tactic commonly used by spammers. Most anti-spam services, whether outsourced or hosted internally, are sophisticated enough to recognize spoof attempts and will block these messages. You can also setup a SPF record for your domain name that identifies which servers on the Internet are authorized to send on your behalf.

Do you have comments on this Ask the Expert Q&A? Let us know.




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Outlook Web Access (OWA) Tips and Advice
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2010, TechTarget | Read our Privacy Policy 		  TechTarget - The IT Media ROI Experts