Just be aware, SMTP Protocol logging will create a text file under the
IMCDATA\log directory. This file will not be deleted, so must be managed
manually as it contains the text of each SMTP protocol message.

There's also a really good article on securing your IMC here:
http://www.exchangeadmin.com/Articles/Index.cfm?ArticleID=7696

You should probably also update your Exchange service pack to SP4 as well.

Cheers

Stu

> -----Original Message-----
> From: James Renfrew [mailto:JamesJamesRenfrew.Com]
> Sent: Wednesday, 2 January 2002 8:20 p.m.
> To: focus-mssecurityfocus.com
> Subject: Exchange 5.5 locking down
>
>
> I'm trying to lock down my Exchange 5.5 mail services.
> Primarily because of unwanted email, or Spam as it's more
> lovingly called.
>
> So I've enabled medium logging of the following services...
> Message Transfer
> SMTP Interface Events
> SMTP Protocol Log
>
> The net effect I want to do is capture IPs of offending
> spammers and then I'll add them to my firewall.
>
> Exchange says that it is suppose to log these events to the
> Event Log in windows. I've seen nothing appear in there
> after having several mail transactions processed.
>
> Would anyone know where these are logged to? (Application /
> System / File)
>
> I am running Exchange 5.5 on the flowing system...
> Dual PIII 800
> 512MB Ram
> Application drive 68Gig free
> OS drive 2.2Gig free
> Win 2K Server
> Service Pack 2
> Exchange 5.5 with all patches and OWA installed
>
> Any suggestions would be appreciated. Also, any alternative
> ways for identifying and shutting down unwanted emails.
>
> James
> Generaljamesrenfrew.com
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]