I have a vague feeling that someone - somehow - has access to my server - or just SMTP server - who should not have access.

 

As everybody else I am getting so many strange emails - most of them are just plain old spam not to worry about.
But I have started to get spam emails into my inbox appearing to be sent from myself - not one of the usual "enveloped" fake addresses - but simply my own email address - even with the photo of myself from my contact entry in the outlook address book.

When looking in Message options there are some outside traces - but I'm a bit baffled if I need to be worried about this - or I can just neglect it as "normal spam".

I have a copy of the message options (headers) - but is it ok to publicise this here? Or would I be showing details of my SMTP which I should keep to myself..?  

 

Relating this - today I was opening Start - Administrative Tools - and out of curiosity right clicked DHCP - and then properties. In the Security tab there were the accounts which I recognize: Administrators, Everyone, System and Users. BUT - also: Account Unknown(S-1-5-32-547)..?

Is this one supposed to be there..?

I have never altered anything with DHCP or DNS myself. Everything should be installed default - right from the installation of the server. There are only a handful of internal users and a terminal server on the network + ISA and the integrated SHAREPOINT SQL service.

Henri,

 

What did you configure on your server to block spam? Do not change security on the DHCP service, that is normal.

All domains have a spf record at the ISP.

 

On the server I only use the IMF Companion (for more than 2 years) which is very good at stopping almost all spams..

The users on the small network do not receive any spams in their inboxes.

They are very well educated to not click any links in either emails or from within IE.

 

Only myself (I'm the admin of the server and network) get some spams into my mailbox - but the majority is just "normail" spam.

 

All users have McAfee Total Protection for SB installed.

No virus program on the server.

I change the login password on the server occasionally.

hmmm? can't remember..  
I did indeed use your tutorial for that on our last installation - but some time ago we completely re-installed the server - and now I can't remember if I put the spamcop into place..

Will check when I get back to the server.