RE: [cobalt-users] Email Issues - Bogus, but confusing to users... Could confuse yours !

["David J. Duffner - NWCWEB.com" <cobalt@xxxxxxxxxx>]

>-----Original Message-----
>From: cobalt-users-admin@xxxxxxxxxxxxxxx 
>[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Chuck Lewis
>Sent: Wednesday, March 03, 2004 1:42 PM
>To: Cobalt Users List
>Subject: [cobalt-users] Email Issues - Bogus, but confusing to 
>users... Could confuse yours !
>
>
>Hi Folks,
>
<SNIP>
>and attached there is a 12KB file TextDocument.zip
>
>We obviously have no "management@xxxxxxxxxxxxx" address setup 
>but this was definitely confusing users.
>
>Is there know way to track this source down ?
>
>If nothing else, this is a "head's up" for what your users are 
>seeing and how confusing it could be to them...
>
>Thanks !
>Chuck

Chuck,

	The only easy way to see where the garbage is coming from
if you use Outlook is to use the 'Options' under 'View' when 
you look at the message.  At the bottom of the dialog window
that pops up is the full and complete headers.  If you look
into the section for originating IP and sender, you can normally
see a constant IP (even if the sender relay is forged and would
be with these ignorant viruses of late) that is your source.

	Drop that IP into your spam filters and firewalls and
all your users will be saved from having to deal with it.  If
the originating IP sends you a complaint, you have all you need
to explain the problem and let them solve it before restoring
their access to your e-mail server(s).

	Sometimes you can use ARIN (www.arin.net) to trace that
IP back and find a real user that may be infected.  If you're
so inclined, you can report that IP to the abuse@ address the
ARIN report provides and they'll deal with it.  If you do, make
sure you cut n' paste the info from the 'Options' full header
so the Abuse department can follow up on it.  Forwarding the 
e-mail tends to strip everything out and they won't act on 
something with limited info.

	HTH!

      David J. Duffner
      VP Operations
      NWC Corporation
      NWCWEB.com
      
============================================
NWCWEB.com - Your Design & Hosting Solution!
Featuring Ensim Pro/Linux Servers, Hosted
Accounts, Web Design and e-Commerce services
NWC Corporation - Global e-Pay Solutions
============================================