RE: Spam issue Exch2k

  • From: "Ohl, Julie" <J.OHL@xxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 17 Sep 2003 15:07:21 -0500

We also purchased MailMarshal are blocking over 1,200 messages a day for 1000 
users. 

-----Original Message-----
From: Dee Arnold [mailto:Deea@xxxxxxxx]
Sent: Thursday, September 11, 2003 7:33 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Spam issue Exch2k


http://www.MSExchange.org/

We purchased MailMarshal and are blocking close to 2,000 emails a month on
just 75 users now.

-----Original Message-----
From: Paul Aitchison [mailto:pdaitch@xxxxxxxxxxxxxxx]
Sent: Thursday, September 11, 2003 7:12 AM
To: [ExchangeList]
Subject: [exchangelist] Spam issue Exch2k


http://www.MSExchange.org/

Hi guys, 

One of our clients was spammed quite heavily a few days ago. The problem
seems to be that the emails were sent directly to them so their Exchange
box was accepting them but it was close to 30,000 emails being sent to
them and subsequently filling the queues with NDR's and so on. 

From our perspective I can't work out a way to stop an attack like this.
The mail was addressed to the client but was being sent from many email
addresses so we couldn't simply use ISA to block them or Exchange. 

The client is only a 512k ADSL connection so the emails swamped them and
brought the server to its knees. 

Any ideas what can be done to prevent an attack like this in the future?

Cheers

paul


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
deea@xxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
#####################################################################################
Only the individual sender is responsible for the content of the message, and 
the message does not necessarily reflect the position or policy of the Texas 
State Teachers Association or its affiliates.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
j.ohl@xxxxxxxxxxx
To unsubscribe send a blank email to leave-exchangelist-1288039L@xxxxxxxxxxxxx
#####################################################################################
Attention:
The information contained in this message and or attachments is intended
only for the person or entity to which it is addressed and may contain
confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon,
this information by persons or entities other than the intended recipient
is prohibited. If you received this in error, please contact the sender and
delete the material from any system and destroy any copies.
#####################################################################################


Other related posts: