Re: SMTP Woes
From: MR (comconix_at_newsgroup.nospam)
Date: 03/14/05
- Previous message: Jim Harrison \(MSFT\): "Re: let isa dynamically refuse some request from outside"
- In reply to: MR: "SMTP Woes"
- Next in thread: Skipster: "Re: SMTP Woes"
- Reply: Skipster: "Re: SMTP Woes"
- Reply: Jack Pea***: "Re: SMTP Woes"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 14 Mar 2005 20:16:02 +0200
I am beginning to feel like it is a losing battle. i just noticed that i
have over 500 current SMTP sessions!!!!
i limited the maximum sessions to 20 and now incoming email is being lost or
delayed for a long time
i thought that i could have all my mail routed to my ISP and give them the
list of valid email addresses in my company (only about 15) and then using a
POP3 connector, pull the filtered messages into my server. the problem with
this is that there is no POP3 connector in Exchange2003 (enterprise). It
looks like i have to go to a third party. does anyone have any experience
with this?
will it work?
"MR" <comconix@newsgroup.nospam> wrote in message
news:eG7kaKIKFHA.3908@TK2MSFTNGP10.phx.gbl...
> My mail server is being bombarded with SMTP messages. There are only about
> 5 users in the company yet we are receiving about 18,000 SMTP attempts per
> hour! Of those maybe 10 are valid messages. This is bringing our internet
> connectivity to its knees.
>
> I am running Exchange 2003. my firewall is ISA 2004.
>
> I am looking for ways to mitigate this problem.
> 1) I tried increasing the line speed but that did not help because the
> number of current SMTP sessions just increased.
> 2)I limited to number of simultaneous sessions to 3 (it was unlimited
> before). this seems to help but now I am concerned that I may be losing
> real messages in that they may timeout before they reach me.
> 3) I am running reports to see if there are any IP address that seem to
> generate the most SMTP messages and I am trying to block those, but that
> is obviously not too effective.
>
> I noticed that in the current sessions in many cases, the User Name is
> either blank, my IP Address (obviously forged) or some other non domain
> Name format. Is there a way to restrict the SMTP connections to only Users
> with valid names. I know there is a way to do a DNS check on the names,
> but that supposedly increases the demand on the server and I an concerned
> it may make matters worse,
>
> I would appreciate any help or tips you can offer.
> Thanks
>
>
>
- Previous message: Jim Harrison \(MSFT\): "Re: let isa dynamically refuse some request from outside"
- In reply to: MR: "SMTP Woes"
- Next in thread: Skipster: "Re: SMTP Woes"
- Reply: Skipster: "Re: SMTP Woes"
- Reply: Jack Pea***: "Re: SMTP Woes"
- Messages sorted by: [ date ] [ thread ]