Thanks Hugo, I thought I saw awhile back you mention you gave it ~64 bytes...I'll give it a shot. Thanks -----Original Message----- From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx] Sent: Friday, August 10, 2001 9:29 PM To: [ISAserver.org Discussion List] Subject: [isalist] RES: RE: Code Red still bugs some IIS 4 Web-server operators http://www.ISAserver.org David, I think that SMTP filter will let only the commands that are present. If you remove a command, ISA SMTP filter will not accept an SMTP session with this command. Probably you removed NOOP because you receved alerts telling you that someone exceded the maximum accepted command size configured in ISA SMTP filter. Usually what I do in ISA deployments is to set NOOP maximum command size to ~ 50 bytes to get rid these alerts and ISA not reject SMTP messages from these remote hosts. HTH. -----Mensagem original----- De: David Dellanno Enviada: sex 10/8/2001 22:04 Para: [ISAserver.org Discussion List] Cc: Assunto: [isalist] RE: Code Red still bugs some IIS 4 Web-server operators http://www.ISAserver.org Hi Hugo, I'm starting to get a ton of 'ISA Server alert: An unsafe SMTP command' Body: ISA Server name: ATLSRV02 NOOP The funny thing, NOOP is diabled in the SMTP filter, do you have any ideas? -----Original Message----- From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx] Sent: Friday, August 10, 2001 9:00 PM To: [ISAserver.org Discussion List] Subject: [isalist] Code Red still bugs some IIS 4 Web-server operators http://www.ISAserver.org Code Red still bugs some IIS 4 Web-server operators Code Reds I and II are still punching Web sites offline -- even those with patched servers. IIS 4 users have found that either version of the worm can crash patched Web servers if those systems are configured to redirect visitors. Microsoft is reportedly working on a fix for this. http://www.newsbytes.com/news/01/168907.html ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: Hugo@xxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')