[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-security] Re: Bad mail getting through.



Hello David,

You might want to check your network for viruses . . .

IIRC, the Klez virus has its own smtp server, that randomly assigns
sender/from fields when sending its payload.  So, even if your machine is
not infected, if an infected machine has your email address, then there's a
fairly high chance it will send at least one message with your name attached
as the from field.

Apparently, the virus also attempts to send users on the same domain as the
infected machine forged postmaster messages, attempting to mislead users
into believing a message they sent has been returned to them.  It's possible
your relaying problems are slightly different than the Klez-infected
messages you've been getting.

Hope this helps,

Tim