Re: crazy spam
- From: v-natliu@xxxxxxxxxxxxxxxxxxxx ("Nathan Liu [MSFT]")
- Date: Wed, 23 Nov 2005 06:09:11 GMT
Hello Param,
Thank you for posting in the SBS newsgroup.
Also, many thanks for Les and Susan's great input.
According to your description, I understand that you have some problems
with the crazy spam emails. If I have misunderstood the problem, please
don't hesitate to let me know.
Considering the current condition, please kindly refer to the following
information:
1. First of all, please update the Trend Anti-Virus software, and then
perform a full scan in the entire SBS network on a non-business time. For
settings of Trend, please kindly contact the vendor of Trend and request
help.
2. As IMF's problem, please kindly refer to the following link to expose
the SCL Rating in Outlook, and then monitor it, then appropriately adjust
the IMF's settings to match your current condition.
Exposing SCL (Spam Confidence Level) in Outlook
http://blogs.technet.com/exchange/archive/2004/05/26/142607.aspx
3. As you mentioned, you have installed the Exchange 2003 SP2, we also
can enable the Sender ID to prevent spam emails.
Sender ID
http://blogs.technet.com/exchange/archive/2005/10/13/412487.aspx
4. Additionally, I'm glad to provide the following information for your
reference:
To protect Exchange, we have many things. The following are most popular
thing that we need to do:
A. Disable the Guest account in your SBS 2003 server and enable Stronger
Password Protection. Everytime when you run CEICW you will be asked for
enabling password policies after it ends. I suggest you enable it. You can
also do that in Server Management\Users->Configure Password Policies. For
more information, see:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
security/bpactlck.mspx
B. We can block unsafe attachments in emails by running through CEICW and
enable Internet Email on the wizard. You should see a page named "Remove
E-mail Attachments" where you can choose to block all or some of the unsafe
attachments. For more information, you can search "Remove E-mail
Attachments" (without the quotes) in SBS 2003 Help and Support Center.
C. You can block open relay and clean up the SMTP queues by referring to
the following KB article:
324958 How To Block Open SMTP Relaying and Clean Up Exchange Server SMTP
Queues
http://support.microsoft.com/?id=324958
D. If you have ISA Server installed on your network, you can use ISA's
SMTP filter to block senders. For more information on how to configure ISA
to block emails, please refer to the following article:
320703 HOW TO: Configure the SMTP Filter in ISA Server to Block SMTP E-mail
http://support.microsoft.com/?id=320703
I appreciate your time and cooperation. If anything is unclear, please feel
free to let me know. I am looking forward to hearing from you.
Best regards,
Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: <param@xxxxxxxxxxxxxxxx>
>References: <urkMts57FHA.2036@xxxxxxxxxxxxxxxxxxxx>
<unU$DS97FHA.3200@xxxxxxxxxxxxxxxxxxxx>
>Subject: Re: crazy spam
>Date: Tue, 22 Nov 2005 21:25:33 -0600
>Lines: 20
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-RFC2646: Format=Flowed; Response
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>Message-ID: <eXbhR297FHA.2676@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: corp2.lazardgroup.com 70.182.148.88
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224808
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>How do I make sure I am protected? Will Trend pick it up?
>
>"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
>wrote in message news:unU$DS97FHA.3200@xxxxxxxxxxxxxxxxxxxxxxx
>> Right now the biggest influx of Sober Viruses are trying to nail boxes.
>>
>> It's truly just what it happening on the net.
>>
>> param@xxxxxxxxxxxxxxxx wrote:
>>> Hi all, literally overnight we have seen a deluge of spam and viruses
>>> coming to all users. Even though Trend picks it up and deletes the
virus,
>>> the amount of emails has increased significantly. How can I stop this?
I
>>> have Exchange SP2 installed, but if I lower the tolerance levels on IMF
>>> then it starts to reject legit users.
>>>
>>> Any ideas?
>>>
>>>
>
>
>
.
- Follow-Ups:
- Re: crazy spam
- From: param
- Re: crazy spam
- References:
- crazy spam
- From: param
- Re: crazy spam
- From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- Re: crazy spam
- From: param
- crazy spam
- Prev by Date: Re: RWW Timing
- Next by Date: Re: Upgrading from SBS2003
- Previous by thread: Re: crazy spam
- Next by thread: Re: crazy spam
- Index(es):
Relevant Pages
|
