Re: Will deny-ing SMTP inbound on port 25 kill exchange outbound on port 25?

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hollis Paul wrote:

I looked through all the log files for about the last year, and it only contains outbound connection information. There were three days in June of 1907 for which the log files were enormous, like 149,757 when the usual size is less than 5000. I don't think I could have possibly sent that many messages in a day, but there was no incoming traffic. Very strange.


Not recent, then, so presumably whatever it was isn't a current problem. Does the Exchange Message Tracking Filter go back that far, and if so, does it correlate? I've only ever used it to go back a couple of weeks.

There are many third-party log analysers out there, and possibly even free ones worth having, though I'm a bit wary of free Windows software from anyone but the big players. The files are plain text, so if I needed to analyse a fair chunk of it in a hurry, I'd probably throw a bit of Perl or PHP together, and extend it later as needed. Grep from the command line would be enough to do many jobs, but is also only available as a third-party add-on.

You're obviously aware that incoming and outgoing events are mixed in these files (how hard would separate files have been?) and most analysers make their separation a significant sales point. Grouping all the events of a session also makes life a lot easier.
.