Re: stop spamming

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Do you have AV on all your destops\servers? Sober U has it's own SMTP
engine, so it may not be going through your exchange server, but may be
going outbound through your firewall....can you block all outbound port 25,
except for your exchange server?


"Rod" <camino.april@xxxxxxxxxx> wrote in message
news:urdtfHm$FHA.4012@xxxxxxxxxxxxxxxxxxxxxxx
> It seems that originating IP is mine (85.32.159.27).
> At the header of the email there is my IP (see above)
>
> "Tom Felts" <tfelts@xxxxxxxxxxxxxxxxxxxxxx> ha scritto nel messaggio
> news:%23LNt41l$FHA.740@xxxxxxxxxxxxxxxxxxxxxxx
> > There is a third possibility:
> >
> > Somone in the world has the virus, and is SPOOFING your domain as the
> > sender. The way to verify is to look at the headers of the e-mail sent
to
> > rossi@xxxxxxxxxx What is the originating IP? Is it yours? If not, it
is
> > spoofed (which sober does, btw).
> >
> >
> > Sounds like rossi@xxxxxxxxx needs a good AV solution.
> >
> >
> > "Rod" <camino.april@xxxxxxxxxx> wrote in message
> > news:%2350xtpl$FHA.328@xxxxxxxxxxxxxxxxxxxxxxx
> >> Hi at all!
> >> I have this configuration:
> >> MailServer (Exchange 2003) ----> Firewall (Watchguard Firebix
X) ----->
> >> Router Telecom ---> Internet
> >> I have MCcafee antivirus.
> >>
> >> My problem is:
> >> A person with this email "rossi@xxxxxxxxx" is receiving, one eache 16
> >> minutes, emails containing WORM.SOBER.U virus, from my smtp server.
> >> I think there are 2 reasons:
> >> a) I have the virus and send the email
> >> Analizing the smtp log of Exchange server 2003, I have no emails
> >> forwarded to rossi@xxxxxxxxx
> >>
> >> b) Someone in the world has the virus that use my server as SMTP
server
> > to
> >> send email containing the virus..
> >> How could I see this connections to my server ?
> >> How could I deny the access ?
> >>
> >> Could anyone help me, please?
> >> Regards,
> >> Antonio Grasso
> >>
> >>
> >
> >
>
>


.

Relevant Pages

  • Re: Exchange 2003 SBS #4.4.7 NDR TO OUR SERVER
    ... SP1/SP2 can be applied all exchange 2003 server. ... This newsgroup only focuses on SBS technical issues. ... Pack 2) when looking at the properties of the exchange server in system ... I can send you the SMTP log but there is no entry for the incoming ...
    (microsoft.public.windows.server.sbs)
  • Re: Configured Monitoring with "off-site" email
    ... problematic domain also uses exchange server as mail server, ... How to Bypass DNS Name Resolution to Test SMTP Mail Flow to Remote ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot send mail to "some" domains
    ... Default Server: dhcp16.srv.hcvlny.cv.net ... When I go to the new ESM and drill through SMTP on the new Exchange server I ... policy is not the Default Policy, ...
    (microsoft.public.exchange.admin)
  • Re: Public IP as relay?
    ... Exchange Server is an open SMTP relay, if the result indicates the Exchange ...
    (microsoft.public.windows.server.sbs)
  • Exchange 5.5 (move from MS Proxy to ISA 2004) REPOST
    ... I'm simply trying to publish Exchange 5.5 on ISA 2004. ... SMTP and SMTPS Server rules from external/internal to the exchange server ...
    (microsoft.public.isa.configuration)