so much SPAM and spoofing

[SMO6]

I'm not sure if this is the correct group to post to but a good starting point nontheless.

We run Domino v6.5 and also have the Symantec email filter setup. Netsky has been attempting to hammer its way in. I've never seen such a widespread virus! This month we're on track to receive 400 messages with Netsky in them. Thank goodness for the Symantec program! We've also been getting some strange delivery failure reports which in retrospect probably aren't really valid anyway. It seems that hackers have found ways to spoof the sender field in email messages and could possibly be sending email on our domain's behalf that hasn't come from any of our employees. Has anyone experienced what I am and how can I attempt to overcome this?

 

[CharlieJax]

Heya,

While you cannot stop the "spoofing" of your domain name (unless you want to work with the ISPs to try and track down the systems sending the e-mails and go after the people behind them, although the systems sending them out are ususaly not owned by the people that started the message on it's way), you can do something about the virues and spam.

1) Setup Domino / SAV to strip out the attachments (such as zip, exe, etc) files that are not commonly sent by users. I know zip files are common, but they are starting to carry way to many virues in them.

2) Domino has some spam blocking features in 6.5, turn those on and block the addresses that the spoofing is coming from (managment, admin, etc).

This should help to stop the viruses and spoofs from getting in. Since we setup the attachment removal we have had 0 viruese get through and infect our systems (since our users will open anything and we constantly communicate with college students we were getting creamed by viruses even with NAV scanning the mail).

Good Luck!

CJ

Don't drink and post, save that for driving home!

 

[SMO6]

I think you misunderstood me. SAV is already saved up and is filtering infected messages out like mad. Thanks anyway!