Virus/Worm NDR issue

[hereigns]

Running E2K w/ spk3 in a mixed W2K environment

For the past 3 weeks I noticed both webmaster and the administrator mailboxes within our organization are sporadically receiving emails similar to the email listed below. When I view the exchange tracking center ALL them show the sender as <> ... is this indicating the message/virus is on the mail server itself?

---- NDR ----

Subject: Undeliverable:Banned file: eeh.zip, .zip, .exe in mail from you

Your message did not reach some or all of the intended recipients.

Subject: SUSPENDED ACCOUNT
Sent: 9/26/2005 1:38 PM

The following recipient(s) could not be reached:

Linda on 9/26/2005 1:42 PM - You do not have permission to send to this recipient. For assistance, contact your system administrator.

< mail.xyz.com #5.7.1 smtp; 550 5.7.1 Message content rejected, id=22968-12-33 - BANNED: eeh.zip, .zip, .exe>

 

[Marcs41]

Start with turning OFF those NDR's. They get abused all the time.
Other factors may be mail spoofing, i.e. an return from another server which received a (false) mail coming from your server (faked of course). Not much you can do about that part.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all.
Free Tip: The F1 Key does NOT destroy your PC!}

Have a look at the shop @

http://www.cafepress.com/tektips

!