Re: Email Flood

From: Steve Foster [SBS MVP] (steve.foster_at_picamar.co.uk)
Date: 11/01/04 

Date: Mon, 01 Nov 2004 15:01:38 -0800

sgupta wrote:

> Since early hours of Oct 31, our mail server is experiencing mail
> flood from a variety of IP addresses spread throughout the world. The
> mails are coming to anyname@ourdomain.com. Thus our server is
> receiving them as domain name is valid. However they are building up
> in the queue for directory lookup as the names are invalid.
> Yesterday, we received about 3500 emails per hour. The rate has come
> down to about 20 per minute since we rebuilt our denied IP address
> list.
>
> What else can we do to stop this siege on our mail server?

If you're running SBS2003, there's an option to filter out recipients
that are not in the AD.

If you're running SBS2000, you can set up recipient filtering, but
you'd have to manually add (and subsequently manage) all the right
entries. 

-- 
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • Forward inbound emails to external SMTP server
    ... I've setup an exchange 2003 server for testing purposes, ... is working and mails are received when my server is running, ... mail is receiving the mails when my test machine is not turned on. ...
    (microsoft.public.exchange.admin)
  • Re: SWEN virus.
    ... >I am receiving these annoying mails containing swen virus. ... >download my mails from the server on a dial-up connection. ...
    (comp.os.linux.networking)
  • Re: SWEN virus.
    ... >I am receiving these annoying mails containing swen virus. ... >download my mails from the server on a dial-up connection. ...
    (comp.os.linux.setup)
  • NDR not forwarded
    ... some mailboxes are forwarded to server B using custom recipients ... receiving all mails for a domain "mail.local" ... (for forwarding from server A) ...
    (microsoft.public.exchange.admin)
  • Re: [SLE] SMTP authentication
    ... So eventhough my local SMTP server dials up to the internet with a certain username and password, that same username and password would not be used as authentication between my local SMTP server and the ISP's one, should it be used as a relay? ... either defer all outgoing mails until you connect to the internet, then flush out all the mails in the queue. ... Your local server would use an external program like fetchmail to poll the mailserver of your ISP, download the mails and feed them to Postfix. ... The test does NOT say "All clients must be in mynetworks, ...
    (SuSE)
Quantcast