We also purchased MailMarshal are blocking over 1,200 messages a day for 1000 users. -----Original Message----- From: Dee Arnold [mailto:Deea@xxxxxxxx] Sent: Thursday, September 11, 2003 7:33 AM To: [ExchangeList] Subject: [exchangelist] RE: Spam issue Exch2k http://www.MSExchange.org/ We purchased MailMarshal and are blocking close to 2,000 emails a month on just 75 users now. -----Original Message----- From: Paul Aitchison [mailto:pdaitch@xxxxxxxxxxxxxxx] Sent: Thursday, September 11, 2003 7:12 AM To: [ExchangeList] Subject: [exchangelist] Spam issue Exch2k http://www.MSExchange.org/ Hi guys, One of our clients was spammed quite heavily a few days ago. The problem seems to be that the emails were sent directly to them so their Exchange box was accepting them but it was close to 30,000 emails being sent to them and subsequently filling the queues with NDR's and so on. From our perspective I can't work out a way to stop an attack like this. The mail was addressed to the client but was being sent from many email addresses so we couldn't simply use ISA to block them or Exchange. The client is only a 512k ADSL connection so the emails swamped them and brought the server to its knees. Any ideas what can be done to prevent an attack like this in the future? Cheers paul ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: deea@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ##################################################################################### Only the individual sender is responsible for the content of the message, and the message does not necessarily reflect the position or policy of the Texas State Teachers Association or its affiliates. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: j.ohl@xxxxxxxxxxx To unsubscribe send a blank email to leave-exchangelist-1288039L@xxxxxxxxxxxxx ##################################################################################### Attention: The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. #####################################################################################