Spam issue Exch2k

  • From: "Paul Aitchison" <pdaitch@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 11 Sep 2003 22:11:45 +1000

Hi guys, 

One of our clients was spammed quite heavily a few days ago. The problem
seems to be that the emails were sent directly to them so their Exchange
box was accepting them but it was close to 30,000 emails being sent to
them and subsequently filling the queues with NDR's and so on. 

From our perspective I can't work out a way to stop an attack like this.
The mail was addressed to the client but was being sent from many email
addresses so we couldn't simply use ISA to block them or Exchange. 

The client is only a 512k ADSL connection so the emails swamped them and
brought the server to its knees. 

Any ideas what can be done to prevent an attack like this in the future?

Cheers

paul



Other related posts: