Our Exchange server is getting a lot of spam. What it is funny if that the "from" address shows an internal address.I believe that this is call spoofing.The Exchange Server version that we have is: Version 8.1 (Build 240.6)We Have symantec Mail Security for Exchange but it is not stopping this.We have not applied any of the Exchange Rollout, Any idea how to fix this?Do you think that appling Exchange Exchange Rollout 9 will fix this?Thanks

Jack,Check this out on how to fight spam and spoof http://technet.microsoft.com/en-us/magazine/2006.12.sidf.aspxYou can check this as well.. http://smtp25.blogspot.com/2007/05/stop-e-mail-spoofing-on-your-mail.htmlRaj

Please also try to methods in this threadJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Jack,Are you using an Edge Transport Server in the perimeter? One of the easiest ways to stop spoofing from your own Domain Names is to set the Edge Server to not accept messages from your own domains. On the Edge, under the Anti-Spam Tab, open Sending Filtering. Add in the Domains that you host. This will stop people from spoofing your domain and sending you mail from yourself.Jason McCaughey MCTS - Exchange 2007

Thank you for your answer but we are not using Edge Transport Server.

Jack,You can also try blocking them with a Transport Rule on your Hub Servers. Setup a rule that drops any message from the outside with a From: Address using your internal domain names.J.Jason McCaughey MCTS - Exchange 2007

Is this safe? Are you sure that I wont be rejecting valid emails? I believe that I can setup the rule to forward the emails to a dummy mailbox for the first month, just to make sure that is not filtering good emails. Let me know.

I think Jay’s suggestion shall work, as it contains two conditions: Messages are from outside; From address has your domain name. By the way, Anti-spam agents can also be installed on the Hub serverJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com