Annoying Weird Spam Problem!

[Star Child]

Hi,

My clients have been recently complaining about receiving some emails from their own domain (with accounts such as "service", "support", "webmaster") claiming to close their email service. Is anybody else experiencing this? Is there a way to put an end to this?

Thanks.

[admin]

The emails that you are reporting are the result of a virus/worm. The messages are not originating from our servers. The sender and the information in the messages is spoofed.

We were experiencing quite a few of these. From looking at the headers, we discovered that most of them were originating from the same address. We added this address to our filter list and cpanel and haven't seen once since.

[Star Child]

How long ago did you add the offending address to the filter? I had a customer call regarding this today. Is it possible they have started coming from a different IP?

[admin]

This filter was added to my personal cpanel configuration....not server-wide. I am sorry for the confusion.

[Star Child]

Oh ok. So I need to setup spam assassin? Is there a way I can enforce the changes on all the accounts once, or do I have to do them one by one?

[admin]

Unfortunately this is done on an account by account basis.

[Star Child]

Ok, thanks.