Hi Vinaykumar, Inline comments... Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Vinaykumar G" <G.VINAY@xxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, June 17, 2002 10:08 PM Subject: [isalist] Spam Mails from My Mail server http://www.ISAserver.org Hi All, I have very serious problem with my mail server. I have SMTP server on IIS with Invalid IP and is published behind ISA server using Mail wizard as secure NAT client. I find lots of spam mails going out from this mail server using external IP address of ISA server. I have enabled SMTP filter on ISA, but i doubt its working or not? * spam prevention is not entirely ISA's job; in fact, ISA perfoms the smallest paret of it. * You should lock down your mail server so that it doesn't accept mail for other domains from non-clients. I find following messages in my Event viewer of ISA server. THE SMTP command exceeded its length. In details it shows as mail from some xyz@xxxxxxxxxx * This is the SMTP filter doing its job; some command (you should include all the details) was longer than the RFC specifies. * One note; of you're using SMTP AUTH to limit spam, then you can't use the SMTP filter. Please advice as my Event viewer is full of such messages. Is it any kind of Mail attack? What has to be done to stop such activity. Please help me out, Regards, Vinay. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')