Re: Security Info

From: Br0wnbear (brownbearat_at_canadadot.com)
Date: 12/31/04 

Date: Fri, 31 Dec 2004 09:16:32 -0500

On Fri, 31 Dec 2004 07:58:53 -0600, <darrell_eddy@bellsouth.net>
wrote:

>I have a small network with windows 2000 server and an exchange 2000 server
>for 25 users. We run McAfee VShield on both servers and McAfee Vscan on all
>PC's. We also have a SOnicWall SOHO firewall to help protect our network.
>
>We have been getting hundreds of messages returned from various sources that
>say that we are sending messages out that I believe are forged and from
>other machines that may be infected outside our network. But how can I be
>sure that the messages are not coming from our systems? How can I check for
>this?
>
>Darrell
>
Darrell

On the rebound they normally attach the original header in the
message.
Check the IP Addresses. This will probably tell you that they were
forged whichin your assumption is correct.

hth
John Brown
Bears are hibern8n but we wake up to help once in awhile.