Just to be sure Simon, you should check your SMTP logs to verify that they aren't sending any mail. That'll also tell you what they're doing depending on logging level. Al -----Original Message----- From: Simon Bound [mailto:simon.bound@xxxxxxxxxxxxxxxxxxxx] Sent: Monday, January 05, 2004 11:20 AM To: [ExchangeList] Subject: [exchangelist] RE: Current sessions[Scanned] http://www.MSExchange.org/ Ok Mark thanks.......Anti-Spam program ? Not installed as it has never been a problem here in the UK with this company. Unless the company gets inundated (which it isn't) I guess I can ignore these "connections" can I ? Not being up in the world of the spammer can you tell me what they are doing when having these sessions open ? Assuming they can't do anything - what's the point ? Simon Bound -----Original Message----- From: Mark Fugatt [mailto:mark@xxxxxxxxx] Sent: Monday, January 05, 2004 3:46 PM To: [ExchangeList] Subject: [exchangelist] RE: Current sessions[Scanned] http://www.MSExchange.org/ Your going to keep getting them, if not from those address then from some others, its just spammers trying to send you spam, your anti-spam program should take care of it, it would be a waste of time sitting there trying to kill all the SMTP connection that you don't know about. Mark Fugatt MCSE, MCT, Microsoft Exchange MVP Pentech Office Solutions Inc Rochester, NY Tel: 585 576 4750 http://www.4mcts.com http://www.exchangetrainer.com -----Original Message----- From: Simon Bound [mailto:simon.bound@xxxxxxxxxxxxxxxxxxxx] Sent: Monday, January 05, 2004 10:44 AM To: [ExchangeList] Subject: [exchangelist] RE: Current sessions[Scanned] http://www.MSExchange.org/ I have specific IP address of 218.166.160.136, 218.167.71.181 and 61.223.89.221 which all appear to belong to the same company in Taiwan.... -----Original Message----- From: Mark Fugatt [mailto:mark@xxxxxxxxx] Sent: Monday, January 05, 2004 3:42 PM To: [ExchangeList] Subject: [exchangelist] RE: Current sessions[Scanned] http://www.MSExchange.org/ They could be other peoples SMTP servers trying to send mail to you. Mark Fugatt MCSE, MCT, Microsoft Exchange MVP Pentech Office Solutions Inc Rochester, NY Tel: 585 576 4750 http://www.4mcts.com http://www.exchangetrainer.com -----Original Message----- From: Simon Bound [mailto:simon.bound@xxxxxxxxxxxxxxxxxxxx] Sent: Monday, January 05, 2004 10:46 AM To: [ExchangeList] Subject: [exchangelist] Current sessions http://www.MSExchange.org/ I've been having a look at E2K Manager and Current Sessions and have found several "unknown" users appearing for upto 6k+ seconds. I have disconnected them. Can anyone enlighten me as to how they have connected and or might be doing ? I I have checked setup on this server for relaying and all apears ok and battened down. The server is apparently behind an ISP Firewall. Thanks Simon Bound ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------