something wrong in my config?

[Detachable]

I seem to get a fair amount of spam e-mail that is spoofed from one internal address to another. The only thing I cannot figure out is how some of the addresses were discovered. I've never used them, nor have I published them anywhere. Is there something in the configuration of scalix or of sendmail that publishes a directory of sorts?

I vaguely remember finding something about this but can't seem to locate it.

[dannyt]

Hi,

May be someone is able to query the Scalix server using LDAP annonymous access to farm the email addresses - just a thought.

Regards,
Danny