RE: Outbound SMTP traffic problems
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 15 Oct 2004 22:54:02 -0700
There are literally dozens of viruses / Trojans in the wild that carry
their own SMTP engine (easy to code).
Time for you to review your ISA logs to determine who's infected.
Jim Harrison
MCP(NT4/2K), A+, Network+
Security Business Unit (ISA SE)
(425) 705-7275
"The the last 10 years of Internet usage has disproven
the theory that a million monkeys typing on a million
typewriters would eventually produce the complete
works of Shakespeare. ..or maybe it only works for
typewriters..."
(unclaimed)
-----Original Message-----
From: Darryl Janetzki [mailto:darrylj@xxxxxxxxxxxxxxxx]
Sent: Friday, October 15, 2004 4:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Outbound SMTP traffic problems
http://www.ISAserver.org
I have observed unusually large outbound SMTP traffic causing loss of
internet bandwidth.
The site is using ISA 2000 and an SMTP relay on the ISA server.
Everything is working normally except for this intermittent and
disruptive traffic.
Has any one observed this problem? I checked for mail relay issues. That
is OK the ISA logs are not showing any problems. Nor is the SMTP logs
any help. The Exchange server has no mail in the queued up
Stopping the smtp service restores normal internet traffic.
Any suggestions on tracking down who did it and to who
Would another Exchange server in the internal LAN be better for the SMTP
relay rather than the relay on the ISA server ( for managing the mail
queue )
Darryl Janetzki
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail from this domain has been virus-scanned.
Other related posts:
