It is not a mail attack on you. It is someone using your mail server to relay spam. Check you relay settings. Go to the SMTP virtual server properties, Access, Relay. Make sure it is set to "Only the list below." John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Vinaykumar G [mailto:G.VINAY@xxxxxxxxx] Sent: Tuesday, June 18, 2002 8:11 PM To: [ISAserver.org Discussion List] Subject: [isalist] Spamming from mail server behind ISA. Importance: High http://www.ISAserver.org Hi All, I have strange problem with my mail server behind ISA server(integrated Mode). I have SMTP server on IIS(on a different PC) with Invalid IP and is published behind ISA server using Mail wizard as secure NAT client. I find lots of Spam mails going out from this mail server using external IP address of ISA server. I have enabled SMTP filter on ISA, but i doubt its working or not? I find following messages in my Event viewer of ISA server continously. THE SMTP command exceeded its length. In details it shows as mail from some xyz@xxxxxxxxxx Please advice as my Event viewer is full of such messages. Is it any kind of Mail attack? What has to be done to stop such activity. Please help me out. I have configured SMTP filter to block messages containing spam but they still get through. please advice of some other ways to prevent ISA from relaying. Regards, Vinay. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')