May be a bit risky to do this - if one of your regular corresponding
partners is running an open MTA you are likely to wind up blocking his
kosher mail to you as well as the bad stuff being bounced off his server by
the Spammer. Personally, we prefer to put the onus onto the clients to put
the offending SPAM sources onto their delete-on-receipt list locally. That,
and counselling the customers not be too indiscrete in using their company
e-addresses for the kind of activities that attract SPAM

Happy New Year
richard L

                -----Original Message-----
                From: James Renfrew [mailto:JamesJamesRenfrew.Com]
                Sent: 02 January 2002 07:20
                To: focus-mssecurityfocus.com
                Subject: Exchange 5.5 locking down

                  I'm trying to lock down my Exchange 5.5 mail services.
Primarily because
                of unwanted email, or Spam as it's more lovingly called.

                So I've enabled medium logging of the following services...
                        Message Transfer
                        SMTP Interface Events
                        SMTP Protocol Log

                The net effect I want to do is capture IPs of offending
spammers and then
                I'll add them to my firewall.

                Exchange says that it is suppose to log these events to the
Event Log in
                windows. I've seen nothing appear in there after having
several mail
                transactions processed.

                Would anyone know where these are logged to? (Application /
System / File)

                I am running Exchange 5.5 on the flowing system...
                        Dual PIII 800
                        512MB Ram
                        Application drive 68Gig free
                        OS drive 2.2Gig free
                        Win 2K Server
                        Service Pack 2
                        Exchange 5.5 with all patches and OWA installed

                Any suggestions would be appreciated. Also, any alternative
ways for
                identifying and shutting down unwanted emails.

                James
                Generaljamesrenfrew.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]