[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Exchange server being used for spam?
If you enable logging for the Exchange IMC, you can get a message in the event log for every connection from other servers. The messages in the log will tell you where it comes from and who the message is for. Cheers, Anders :) > -----Original Message----- > From: John Tanouye [mailto:[email protected]] > Sent: 6. november 2001 21:52 > To: [email protected] > Subject: [FW-1] Exchange server being used for spam? > > > I think my Exchange Server is still being used for spamming > again. I turned > off mail relaying from following the steps in this article. > However, when I > look through my FW logs, I see outside IP's accessing the > mail server using > the smtp service. I did a reverse lookup on some of the IP's > and they return > this: > > The IP number 205.188.157.37 resolves to the hostname > imo-d05.mx.aol.com > The IP number 211.21.211.179 resolves to the hostname email.mhcn.net > The IP number 216.136.225.197 resolves to the hostname > gpg3.bc.sc5.yahoo.com > The IP number 209.167.79.88 resolves to the hostname > uuout8smtp8.uu.flonetwork.com > The IP number 207.217.120.12 resolves to the hostname > harrier.mail.pas.earthlink.net > > They all look to be from ISP's or mail servers. Which leads > me to believe > they are spammers. Anyone know how to stop this? > > Thanks your help would be greatly appreciated, > > John > > =============================================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > =============================================== > =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
|