NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] how to trace Spam back to origin



Another possibilty is that your SMTP server got used as a relay, although
if the source IP of the mail is one of your routers, that does sound suspect!
Try some of the anti-spam sites which will remotely test your server to make
sure it won't relay. I'd start there FWIW..  just a good precaution under the
circumstances..

>>> <[email protected]> 03/19/02 12:43PM >>>
If this is the wrong place to ask sorry but I figure its a good place to
start.

I have received an email saying that some ually explicit Spam email
originated on our network.
I have all the headers and the IP in question is the external interface of
one of our routers in the UK.
I don't think this can be correct and I am guessing the IP was spoofed. Is
there anyway to trace all the machines back and prove this?
Regards
Paul

--------------------------------------------------------------------------------------------

C. Paul Simons
Corporate IT Security Architect
IHS Energy Group, Englewood, CO.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.