[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] how to trace Spam back to origin
Another possibilty is that your SMTP server got used as a relay, although if the source IP of the mail is one of your routers, that does sound suspect! Try some of the anti-spam sites which will remotely test your server to make sure it won't relay. I'd start there FWIW.. just a good precaution under the circumstances.. >>> <[email protected]> 03/19/02 12:43PM >>> If this is the wrong place to ask sorry but I figure its a good place to start. I have received an email saying that some ually explicit Spam email originated on our network. I have all the headers and the IP in question is the external interface of one of our routers in the UK. I don't think this can be correct and I am guessing the IP was spoofed. Is there anyway to trace all the machines back and prove this? Regards Paul -------------------------------------------------------------------------------------------- C. Paul Simons Corporate IT Security Architect IHS Energy Group, Englewood, CO. ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|