Re: sending spam

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

The implementation will depend on which firewall you are using.

The process would be:
- add a rule to permit the SBS outbound access on port 25
- add a rule denying outbound access on port 25 to any other host
- check your logs to see when the deny rule is invoked - this will give you
the culprit's IP (or maybe IPs :-( )

--
David Olsen
www.powerbits.com.au


"Duncan McC" <hard@xxxxxxx> wrote in message
news:MPG.2367e9e454cb12b29899eb@xxxxxxxxxxxxxxxxxxxxx
In article <uF4SiuvMJHA.4240@xxxxxxxxxxxxxxxxxxxx>,
david.powerbits@xxxxxxxxxxxxxxx says...
Block port 25 for all IPs except your SBS.
Then watch the logs to which IP is attempting to use that port.

And how do yer do that? :)

--
Duncan



.

Relevant Pages

  • (Wish) HTTPS support for yum
    ... Some places have freakingly paranoid networks ... ... 443tcpconnect only outbound access - theres nothing much can be done ... post/get and port 443 ... Prtunnel create a TCP forwarding a local port through the proxy and to ...
    (Fedora)
  • Re: unable to log-in to secure sites
    ... If you are using a firewall, make sure it allows outbound access to https ... port 443. ...
    (microsoft.public.win2000.security)
  • Re: Strange WAN Activity
    ... > firewall logs for a possible TCP FIN scan that keeps ... > company's intranet server IP and its port 80 across our ... > My firewall is a Sonicwall Pro 200 and I'm running W2K ... It's difficult to be sure without inspecting the web server for signs of ...
    (microsoft.public.win2000.security)
  • Re: Identifying Internet Attacks
    ... contain the hacker to a particular machine, leave the machine on the network ... Some firewall software such as ... open ports; however, this will not identify which program is using the port. ... firewall logs, the IIS web and ftp server logs and Windows security event ...
    (microsoft.public.inetserver.iis.security)
  • Re: Question about file permissions
    ... system log files. ... the system logs. ... such _may_ offer a better chance of connecting. ... to connect know about the non-standard port. ...
    (alt.os.linux.suse)