receiving spam emails from our own domain

[lockmac]

Hi there. We are receiving spam messages, but they are coming from email addresses at our own domain.

We only have about 5 or 6 different emails created for our domain, and we have getting spam from different emails at @ our own domain, such as ghbos@xxxx.com.au.

Is this just a spoof (not really being sent from our domain), or has our server got a virus or something similar?

What do you guys suggest we do? First off, our whole network does receive quite a bit of spam, not just through our own domain but mainly from others.

As well as trying to combat the problem of spam being sent from our own domain, what is the best server based spam control software for microsoft exchange?

also.. whats the best anti-virus software for a server? pretty sure it doesnt have one (the person that set it up is a joke)

any help and suggestions appreciated.

many thanks guys

 

[daveybrat]

I still think Avira antivirus is the best out there. Extremely high detection rate and a solid piece of software that consumes little resources. Avira makes a server based antivirus as well. Check it out.

They also have Antivirus for mail servers including Exchange. That would be a good pickup for you to install on it.

 

[RebateMonger]

You can look at the headers from the emails and tell where they originated. There are many tutorials on how to interpret the headers. I doubt the emails came from your server.

 

[The Keeper]

RebateMonger is right, those email addresses are more than likely faked. Still, it doesn't hurt to run nightly virus and malware check on computers in the domain, including servers.

I've even received spam from my "own address" on several occasions.

 

[Tarrant64]

Are you looking for a free solution for your antivirus / spam filter? At my last job one of the IT guys was able to request trial periods of hardware spam filters and found one he liked and just purchased it. Put it up on the network and was good to go. Most of them work well with Exchange. (example would be barracuda I guess).

We have switched from Symantec to McAfee where I work. It's not a resource hog like Symantec.