!! help someone spoof my address !!

  • Thread starter Thread starter Jesse
  • Start date Start date
J

Jesse

Ok this is what happen,

someone some how got a holded of an email within my
domain and fake some emails going out to about 130 ppl.
I dont know how he did this but i think he spoof my
address or dns some how.
So how can I protect this and not allow this from
happening again??

Thank you very much for any response

system:
windows2k sp3 + all updates
exchange2k sp3 ( no open relay)
DNS( zone transfer is set to transfer between two servers
only within the domain that has dns)
DHCP
 
Sorry Jesse, its dead easy in most email clients to change the sending
address to anything you want - just as you have set your address to be
(e-mail address removed) (which is obviously not a real address but one
altered to prevent spam).

If you get your hands on one of the emails you can look at the routing
information and determine the IP where the email was sent from. Then use
arin.net or ripe.net (etc) to determine who the IP belongs to.
 
Back
Top