Also make sure that any machines that are allowed to relay through the exchange server are, if possible, authenticating and keep very tight control on this list.
-----Original Message----- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: 19 August 2008 03:24 PM To: MS-Exchange Admin Issues Subject: RE: SMTP generated by virus Everyone should do this, before there is a problem. But just to nitpick the solution wording....Add a rule to allow your exchange server, then add a default deny after that. :) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 19, 2008 9:08 AM To: MS-Exchange Admin Issues Subject: RE: SMTP generated by virus Do it at your firewall. Block anything on 25 outbound by default and then add a rule for your exchange server to allow only it outbound. That will solve the blacklisting issue while you can get the machines under wraps. -----Original Message----- From: JP [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 19, 2008 9:01 AM To: MS-Exchange Admin Issues Subject: SMTP generated by virus We are being affected by viruses on workstations that send mail thru an SMTP generated by the virus, bypassing our exchange server. As a result, we get blacklisted before we know it. I can remove the entire server where exchange is from the network and mail is still flowing out. My question is this: is there a method of blocking E-Mail sent thru port 25 by anyone but exchange? How can we stop these situations? Thank you in advance for your assistance. J.P. Lacasse ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ Disclaimer: The Development Bank of Southern Africa exercises no control over information contained in any e-mail message originating from within the organisation. The Bank makes no representation relating to the completeness or accuracy and accepts no responsibility for any loss, damage or liability that is incurred by reliance on the content hereof by the recipient or any other party. Each page attached hereto must also be read in conjunction with any disclaimer, which forms part of it. Confidentiality: The e-mail is privileged and confidential and for use of the addressee only. Should you have received this e-mail in error, please return it to [EMAIL PROTECTED] Dissemination, disclosure, copying or any similar actions of the content of this e-mail is strictly prohibited. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~