Running Exchange Server 2003 SP2. We seem to be getting a lot of spam emails where the "From" field is a fictitious name, but the From address is the same as the recipient. For example, we may get an email that is from "Abudula Max <me@mycompany.com>" and to "Me <me@mycompany.com>". Obviously, the From filed is spoofed, as the users are not spamming themselves. Is there a way to tell Exchange Server that any such e-mails are spam, without preventing blocking emails that users legitimately send to themselves? -Ryan Adams Free Computer Tips and more:http://RyanTAdams.com Paid Tech Support: Black Diamond

Even spam filter software has a hard time with this. We have found blocking country ip addresses outside of the US [in our case] has greatly reduced spam. If European this maybe a bit more difficult but blocking Russia et al and China is a good start.

Would there be a way to block emails from the domain mycompany.com, EXCEPT for those that come from our IP address/the IP address of our hosting company? -Ryan Adams Free Computer Tips and more:http://RyanTAdams.com Paid Tech Support: Black Diamond

You can use the IMF filter along with tarpitting and recipient filtering to block most of these spoof emails. The IMF will inspect it once the SMTP transaction begins and it can be set to reject or delete those said emails. Because it depends on heuristics its not 100% accurate but its does a very good job and will filter most of the unwanted SPAM.