IMS Issues - Possible Relaying

[Randy Webster]

For some time, I've monitored my IMS "Outbound Queue" I am constantly getting messages that don't have information in the "Originator" field, it only shows <>. To puzzle me further, I constantly get a Destination host of "BOUNCE01.OFFERCHECK.COM". I've check to verify that my Exchange Server is not Relaying, its not. Could this be coming from Hidden ads downloaded from a website. Is there an easy way to find out whom these email are coming from (internally)?

Thanks...
Randy

[Dave]

Hi Randy,

Those are bounced messages coming from your Exchange server. They are created when a spammer sends a message to a non-existant mailbox on your server. Your administration mailbox then sends an NDR (non-delivery report) to the sending address of the spam message with a from address of <>. The from addresses used by spammers are typically bogus. See RFC 821 for a more complete description of this: http://www.ietf.org/rfc/rfc0821.txt

Some users are probably receiving lots of spam from offercheck.com. If you stop that mail from coming in, you stop the bounces from going out.

- Dave

------------
Randy Webster at 6/18/2002 6:10:02 PM

For some time, I've monitored my IMS "Outbound Queue" I am constantly getting messages that don't have information in the "Originator" field, it only shows <>. To puzzle me further, I constantly get a Destination host of "BOUNCE01.OFFERCHECK.COM". I've check to verify that my Exchange Server is not Relaying, its not. Could this be coming from Hidden ads downloaded from a website. Is there an easy way to find out whom these email are coming from (internally)?

Thanks...
Randy