Forged FROM address in my domain

[Hadlow, Tim]

Raymond,

I don't think we should have any users doing that, they would normally be
using https though to our own Outlook Web Access servers and therefore
within our own IP subnets.

Tim.
-----Original Message-----
From: Raymond Dijkxhoorn [mailto:raymond at PROLOCATION.NET]
Sent: 25 November 2003 12:49
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Forged FROM address in my domain


Hi!

> I am getting quite a lot of Spam getting through which has a forged FROM
> address using a spurious user name in our own domain. Is there any easy
way
> to say
> If From is *@my.domain and IP address is not my IP subnet then message 'Is
> Definitely Spam'?

You never have users mailing from home or users mailing from a webcafe
somewhere ? In most situations there is also legit mail comming in.

Bye,
Raymond.

















**************************************************************************

Experience the British Library online at www.bl.uk

Adopt a Book this season ! Help the British Library conserve the world's
knowledge.  www.bl.uk/adoptabook

*************************************************************************

The information contained in this e-mail is confidential and may be legally
privileged. It is intended for the addressee(s) only. If you are not the
intended recipient, please delete this e-mail and notify the
postmaster at bl.uk : The contents of this e-mail must not be disclosed or
copied without the sender's consent.

The statements and opinions expressed in this message are those of the
author and do not necessarily reflect those of the British Library. The
British Library does not take any responsibility for the views of the
author.

*************************************************************************