none
Spam von der eigenen Domain RRS feed

  • Frage

  • Hallo Exchange-Community,

    unser Exchange 2007 lässt immer wieder Spam von externen Absendern durch, die als Absender unsere eigene Domain verwenden. Dies wird leider auch nicht als Spam gekennzeichnet.

    Gibt es irgendwelche Möglichkeiten, am Exchange zu verhindern, dass Mails von extern empfangen werden, die @unseredomaene.com als Absenderadresse verwenden?

    Falls sich dies am Exchage nicht verhindern lässt, welche Möglichkeiten hätte man dann?

    PS: wir hätten noch Kaspersky for Exchangeserver 8.0 und Sophos UTM9 im Einsatz, wobei wie die UTM9 bisher ohne Email Protection lizenziert haben.

    Danke für einen Tipp!

    Hier wäre noch ein Mailheader einer solchen Spam-Mail:

    Received: from 65-60-69-146.static-ip.telepacific.net (65.60.69.146) by
     mail.unseredomaene.com (192.168.1.221) with Microsoft SMTP Server id 8.3.327.1;
     Wed, 23 Oct 2013 15:49:41 +0200
    Received: from voice195.unseredomaene.com (10.0.0.22) by unseredomaene.com
     (10.0.0.121) with Microsoft SMTP Server (TLS) id G5WT4I7Y; Wed, 23 Oct 2013
     05:49:40 -0800
    Received: from voice4161.unseredomaene.com (10.53.157.152) by smtp.unseredomaene.com
     (10.0.0.23) with Microsoft SMTP Server id NVCOFNKF; Wed, 23 Oct 2013 05:49:40
     -0800
    Date: Wed, 23 Oct 2013 05:49:40 -0800
    From: Administrator <voice1@unseredomaene.com>
    X-MS-Has-Attach: yes
    X-MS-TNEF-Correlator: <B2ZRO2RYP69AOG70CC0OCWY3S1GB43X97K3PCD@unseredomaene.com>
    X-Priority: 3 (Normal)
    Message-ID: <ZHVVMQYUQ5867WNQKCK8I80YTLZIYNK7KK1ZGU@unseredomaene.com>
    To: <info@unseredomaene.com>
    Subject: Voice Message from Unknown (395-977-4496)
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
        boundary="_009_SNCOIT619QULYCA4XDWU555EGW3QU5F21N52OCI5Q23HHL7I26SXH1Y_"
    Return-Path: Unity_UNITY5@armandoweb.com
    X-MS-Exchange-Organization-PRD: unseredomaene.com
    X-MS-Exchange-Organization-SenderIdResult: None
    Received-SPF: None (SERVER01.unseredomaene.local: voice1@unseredomaene.com does
     not designate permitted sender hosts)
    X-MS-Exchange-Organization-SCL: 1
    X-MS-Exchange-Organization-PCL: 2
    X-MS-Exchange-Organization-Antispam-Report:
     DV:3.3.13021.464;SV:3.3.4604.600;SID:SenderIDStatus None;OrigIP:65.60.69.146
    X-KSE-AntiSpam-Interceptor-Info: scan successful
    X-KSE-AntiSpam-Version: 5.1.9, Database issued on: 23.10.2013 15:35:12
    X-KSE-AntiSpam-Status: KAS_STATUS_NOT_DETECTED
    X-KSE-AntiSpam-Method: none
    X-KSE-AntiSpam-Rate: 5
    X-KSE-AntiSpam-Info: Lua profiles 52098 [Oct 23 2013]
    X-KSE-AntiSpam-Info: Version: 5.1.9
    X-KSE-AntiSpam-Info: Envelope from: Unity_UNITY5@armandoweb.com
    X-KSE-AntiSpam-Info: {RECEIVED: dynamic ip detected}
    X-KSE-AntiSpam-Info: Rate: 5
    X-KSE-AntiSpam-Info: Status: not_detected
    X-KSE-AntiSpam-Info: Method: none
    X-KSE-Antivirus-Interceptor-Info: scan successful
    X-KSE-Antivirus-Info: Clean


    • Bearbeitet sebaton Mittwoch, 23. Oktober 2013 14:35
    Mittwoch, 23. Oktober 2013 14:34