Microsoft Exchange Server & Spoofed Email Addresses

[RagingBITCH]

Question for you Exchange gurus:

Our work uses Microsoft Outlook Exchange server. Everyone uses Outlook on their computers.

I'm subscribed to a distribution list/global address list known as info@company.com (theres like 4 or 5 ppl on the list). Every email that comes to info@company.com goes to me.

My question is: we get a lot of, I guess, spoofed emails? The to: line usually says something like jaojifs0@company.com but it still gets through to me. On a normal email where you send it to an address that doesn't exist at our company, like joifjsoj@company.com it bounces back to you. I guess the above situation would be spoofing? (Sorry if I"m not using the correct term) It would definitely seem like it's going to info@company.com. Here are the headers from one of the emails I got:

Microsoft Mail Internet Headers Version 2.0
Received: from ironport.sellingsource.com ([165.236.242.166]) by SERVER01.walkthetalk.com with Microsoft SMTPSVC(5.0.2195.6713);
Thu, 18 Mar 2004 14:12:02 -0600
Received: from bioqmed.ufrj.br (66.154.69.228)
by mailin.sellingsource.com with ESMTP; 18 Mar 2004 12:10:35 -0800
Message-Id: <30drfh$1d0a6s@mailin.sellingsource.com>
From: "Charles" <allison16ca@bioqmed.ufrj.br>
To: "huub@walkthetalk.com" <huub@walkthetalk.com>
Subject: Control your spending with Intuit's Quicken
Date: Thu, 18 Mar 2004 15:10:36 -0500
MIME-Version: 1.0
Content-Type: text/html
Return-Path: allison16ca@bioqmed.ufrj.br
X-OriginalArrivalTime: 18 Mar 2004 20:12:02.0195 (UTC) FILETIME=[468F1630:01C40D25]

I don't get it b/c it's going to huub@walkthetalk.com which does not exist and I get an error message when the email bounces back to me. Is there any setting in Exchange server where I can filter this crap out? (It's 2002, not the 2003 with built in spam filtering and all that) I have my rules setup where all the normal spam gets filtered into a junk mail folder but the many spoofed emails get through.

Thanks in advance,
Melvin

 

[Thor86]

Welcome to the world of spam.

You will need a filtering system to act as an SMTP gateway, and only accept connections from that gateway, and not have your exchange server directly connected on the internet, even behind a router. All inbound connections are accepted by default on exchange servers.

Here is a great spam filtering gateway appliance, and managed service if you do not want to install any software-based filtering on your mail server(s): http://www.ntelligent.com/.