I am using Exchange 5.5 and forwarded is disabled. I am not an open relay; I have tested that several times. I actually show several IPs that have connected through Firewall Sessions. I have tried everything I can think of to deny them access with packet filters and everything. I disconnect their sessions and within minutes they are reconnected Marc B. Lingenfelter Network Administrator -----Original Message----- From: Chad Roush [mailto:croush@xxxxxxxxxxx] Sent: Thursday, August 08, 2002 7:36 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Hijacked http://www.ISAserver.org What mail server are you using? You need to disable message forwarding. That should take care of your problem. Chad -----Original Message----- From: Marc Lingenfelter [mailto:marclingenfelter@xxxxxxxxxxxxxxxxxx] Sent: Thursday, August 08, 2002 7:42 AM To: [ISAserver.org Discussion List] Subject: [isalist] Hijacked http://www.ISAserver.org It appears my system has been Hijacked by Spammers. How can I block all IPs from entering through ISA and then gradually allow selected IP and/or domains access. Marc Lingenfelter ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: croush@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: marclingenfelter@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')