Re: Exchange Server 6.5 pop relay
- From: Jim Behning SBS MVP <jimbehning@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 13 Oct 2008 08:46:00 -0400
Good.
On Mon, 13 Oct 2008 01:39:01 -0700, clariongrade
<clariongrade@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
JimSee what SBS support is working on
Briliant! I have changed my settings as you suggested and the problem has
gone away.
I knew the problem I was solving was on the server as I had turned all other
machines on the network off overnight, and only investigated problems during
this period.
All my machines have Avast! anti virus sbs suite, plus Spybot, and Microsoft
anti trogan software.
With the system having all the machines on the network I have been free from
spam for 48 hours, and have applied to be de-blacklisted.
Thanks a lot
Trevor
"Jim Behning SBS MVP" wrote:
Here is what I do but I do not collect with pop. Some of the same
concepts work though.
http://msmvps.com/blogs/bgb/archive/2008/02/23/exchange-connection-filter-using-a-real-time-block-list-and-imfperfmon-msc.aspx
Note that if you have infected workstations, they are going to spam
without going through Exchange. If you have ISA 2004 installed you can
easily make a firewall policy to block them from sending smtp. If you
have a decent firewall router you can block smtp from everything but
the server.
You can install network monitoring tools like Wireshark to watch
traffic going out the external connection. You can also look at your
network switch for ports that are blinking excessively. A trained eye
can sometimes recognize infected machines. Just the server and
possibly the external connection would have a lot of activity.
Workstations should be fairly quiet.
What anti-virus are you using on the server and workstations?
On Fri, 10 Oct 2008 02:04:01 -0700, clariongrade
<clariongrade@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
http://blogs.technet.com/sbs/default.aspx
Check your SBS with the SBS Best Practices Analyzer
http://blogs.technet.com/sbs/archive/tags/BPA/default.aspx
.
- References:
- Exchange Server 6.5 pop relay
- From: clariongrade
- Re: Exchange Server 6.5 pop relay
- From: Lanwench [MVP - Exchange]
- Re: Exchange Server 6.5 pop relay
- From: clariongrade
- Re: Exchange Server 6.5 pop relay
- From: Jim Behning SBS MVP
- Re: Exchange Server 6.5 pop relay
- From: clariongrade
- Exchange Server 6.5 pop relay
- Prev by Date: Re: Trend version info
- Next by Date: Re: Network is not visible
- Previous by thread: Re: Exchange Server 6.5 pop relay
- Next by thread: RE: Exchange Server 6.5 pop relay
- Index(es):
Relevant Pages
|
Loading