Hallo Exchange-Community,
unser Exchange 2007 lässt immer wieder Spam von externen Absendern durch, die als Absender unsere eigene Domain verwenden. Dies wird leider auch nicht als Spam gekennzeichnet.
Gibt es irgendwelche Möglichkeiten, am Exchange zu verhindern, dass Mails von extern empfangen werden, die @unseredomaene.com als Absenderadresse verwenden?
Falls sich dies am Exchage nicht verhindern lässt, welche Möglichkeiten hätte man dann?
PS: wir hätten noch Kaspersky for Exchangeserver 8.0 und Sophos UTM9 im Einsatz, wobei wie die UTM9 bisher ohne Email Protection lizenziert haben.
Danke für einen Tipp!
Hier wäre noch ein Mailheader einer solchen Spam-Mail:
Received: from 65-60-69-146.static-ip.telepacific.net (65.60.69.146) by
mail.unseredomaene.com (192.168.1.221) with Microsoft SMTP Server id 8.3.327.1;
Wed, 23 Oct 2013 15:49:41 +0200
Received: from voice195.unseredomaene.com (10.0.0.22) by unseredomaene.com
(10.0.0.121) with Microsoft SMTP Server (TLS) id G5WT4I7Y; Wed, 23 Oct 2013
05:49:40 -0800
Received: from voice4161.unseredomaene.com (10.53.157.152) by smtp.unseredomaene.com
(10.0.0.23) with Microsoft SMTP Server id NVCOFNKF; Wed, 23 Oct 2013 05:49:40
-0800
Date: Wed, 23 Oct 2013 05:49:40 -0800
From: Administrator <voice1@unseredomaene.com>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <B2ZRO2RYP69AOG70CC0OCWY3S1GB43X97K3PCD@unseredomaene.com>
X-Priority: 3 (Normal)
Message-ID: <ZHVVMQYUQ5867WNQKCK8I80YTLZIYNK7KK1ZGU@unseredomaene.com>
To: <info@unseredomaene.com>
Subject: Voice Message from Unknown (395-977-4496)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_009_SNCOIT619QULYCA4XDWU555EGW3QU5F21N52OCI5Q23HHL7I26SXH1Y_"
Return-Path: Unity_UNITY5@armandoweb.com
X-MS-Exchange-Organization-PRD: unseredomaene.com
X-MS-Exchange-Organization-SenderIdResult: None
Received-SPF: None (SERVER01.unseredomaene.local: voice1@unseredomaene.com does
not designate permitted sender hosts)
X-MS-Exchange-Organization-SCL: 1
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-Organization-Antispam-Report:
DV:3.3.13021.464;SV:3.3.4604.600;SID:SenderIDStatus None;OrigIP:65.60.69.146
X-KSE-AntiSpam-Interceptor-Info: scan successful
X-KSE-AntiSpam-Version: 5.1.9, Database issued on: 23.10.2013 15:35:12
X-KSE-AntiSpam-Status: KAS_STATUS_NOT_DETECTED
X-KSE-AntiSpam-Method: none
X-KSE-AntiSpam-Rate: 5
X-KSE-AntiSpam-Info: Lua profiles 52098 [Oct 23 2013]
X-KSE-AntiSpam-Info: Version: 5.1.9
X-KSE-AntiSpam-Info: Envelope from: Unity_UNITY5@armandoweb.com
X-KSE-AntiSpam-Info: {RECEIVED: dynamic ip detected}
X-KSE-AntiSpam-Info: Rate: 5
X-KSE-AntiSpam-Info: Status: not_detected
X-KSE-AntiSpam-Info: Method: none
X-KSE-Antivirus-Interceptor-Info: scan successful
X-KSE-Antivirus-Info: Clean
