RE: how to cut down on spam

2003-06-26 Thread Freddie Soerensen
Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED] 
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems 
 much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely don't want 
 to block real customers from sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this :
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the 
 program than vice 
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield. 
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month!
   http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface: 
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month!
 http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread John Etie
We're evaluating this companies product,
http://www.lightspeedsystems.com/.   Seems quite good so far.

-Original Message-
From: Bailey, Matthew [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 9:20 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


We use the Surf Control product and have great success with it.  It
(along with a lot of other products) allows us to use Reverse DNS
lookups and RBL lookups against incomming e-mail to block a lot of spam
before it even gets through the door.  After it makes it through those
checks they have a nice Anti-Spam agent that is updated nightly.  In
addition, you can do dictionary checks to further eliminate spam and
unwanted content.  It also gives you the flexibility to setup allow
rules to prevent known good domains from being submitted against the
anti-spam filters.  It took a few weeks to tune all the filters but
since then it runs very well.

- Matt

Matthew Bailey
LAN Engineer
CSK Auto, Inc.
Voice: 602.631.7486
Fax: 602.294.7486



 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 7:46 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 Has anyone heard or used the surf control product. It
 seems much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely
 don't want to block real customers from sending us email--just the 
 spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this : 
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the program than 
  vice versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Exchange 5.5 Changing Domains

2003-06-26 Thread Bendall, Paul
Hi Guys,

I have read the FAQ on www.swinc.com with regard to changing the domain a
Exchange 5.5 server resides in. What I am not clear on is whether you can
run a site with some servers in one domain and some in the other or whether
all servers must reside in one domain or the other within the site. Anyone
had an experience of moving domains?

TIA

Paul


--
If you have received this e-mail in error or wish to read our e-mail 
disclaimer statement and monitoring policy, please refer to 
http://www.drkw.com/disc/email/ or contact the sender.
--


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Slightly OT: Windows 2000 SP4 ...

2003-06-26 Thread Atkinson, Miles
... has been released to Premier customers.

Sorry, I don't have a public URL for it, but the fixes are at
http://support.microsoft.com/default.aspx?scid=kb;EN-US;327194, Exchange
is mentioned a couple of times.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Restoring Exchange 5.5. to the same name

2003-06-26 Thread Smith Thomas Contr 911 SPTG/SC
I understand that when you do a restore there is a procedure that you can
do it with the server you are restoring is online and the new server with
the same name is online. Has anyone ever restored Exchange to a new server
like that? And when you copy the logs to the new server it would still be
thinking it is the old server.

Thanks

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: IPM.Post VS. IPM.Note

2003-06-26 Thread Roger Seielstad
Actually, that sounds like the network password is out of sync between the
client and the domain.

Try closing all applications, ensuring you're logged into only one machine,
and then change your network password from that machine.

--
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.


 -Original Message-
 From: Siegfried Weber [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, June 25, 2003 6:26 PM
 To: Exchange Discussions
 Subject: RE: IPM.Post VS. IPM.Note
 
 
 Three times? That reminds me... If you have the Exchange Server
 scripting add-on enabled in Outlook, MAPI Outlook will open three
 connections to the Exchange server (without the Exchange scraping
 add-on, only two). One for each store (mailbox and public) and one to
 the scripting system folder. I wonder if that is related to 
 the general
 problem.
 
 I also saw similar issues back in 1998 when we had a network issue and
 the RPC/NETBIOS calls failed. Changing the RPC binding order helped
 these days but since the Outlook 2002 process to connect to 
 an Exchange
 server has changed I am not sure if the former issue might happen here
 too.
 
  -Original Message-
  From: Beavers, Terry [mailto:[EMAIL PROTECTED] 
  Sent: Wednesday, June 25, 2003 8:55 PM
  To: Exchange Discussions
  Subject: RE: IPM.Post VS. IPM.Note
  
  
  Seriously, Siegfried, Andy, at least half the time I access 
  the PFs (of which I am owner) using OL2002 I get a logon 
  prompt box in which I enter my same logon credentials (THREE 
  times because it rejects them each
  time) and then goes ahead and let's me in the PF with 
  appropriate access.
  
  Yes, I know the scripts should be rewritten.
  
  Terry L. Beavers
  Technology Assessment  Application
  Information Technologies
  University of South Florida
  Tampa,  Florida
  
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Web Interface: 
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Exchange 5.5 Changing Domains

2003-06-26 Thread Andy David
You can have two servers that are in separate domains in one site .
Its all a matter of making sure the required trusts are there as well as
ensuring the service account has the necessary permissions in each domain.
I did this last in 1998 and IIRC, it was pretty painless and not much
different than moving mailboxes between servers in the same domain.

- Original Message - 
From: Bendall, Paul [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 4:45 AM
Subject: Exchange 5.5 Changing Domains


 Hi Guys,

 I have read the FAQ on www.swinc.com with regard to changing the domain a
 Exchange 5.5 server resides in. What I am not clear on is whether you can
 run a site with some servers in one domain and some in the other or
whether
 all servers must reside in one domain or the other within the site. Anyone
 had an experience of moving domains?

 TIA

 Paul


 --
 If you have received this e-mail in error or wish to read our e-mail
 disclaimer statement and monitoring policy, please refer to
 http://www.drkw.com/disc/email/ or contact the sender.
 --


 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Restoring Exchange 5.5. to the same name

2003-06-26 Thread Andy David
What are you trying to accomplish?



- Original Message - 
From: Smith Thomas Contr 911 SPTG/SC [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 6:30 AM
Subject: Restoring Exchange 5.5. to the same name


 I understand that when you do a restore there is a procedure that you can
 do it with the server you are restoring is online and the new server with
 the same name is online. Has anyone ever restored Exchange to a new server
 like that? And when you copy the logs to the new server it would still be
 thinking it is the old server.

 Thanks

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 Changing Domains

2003-06-26 Thread Roger Seielstad
Its absolutely possible. 3 years ago I ran a 10 site org in which all 10
sites were in local resource domains. The one caveat is that its much easier
to do with X.400 connectors than with Site Connectors.

--
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.


 -Original Message-
 From: Bendall, Paul [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, June 26, 2003 4:46 AM
 To: Exchange Discussions
 Subject: Exchange 5.5 Changing Domains
 
 
 Hi Guys,
 
 I have read the FAQ on www.swinc.com with regard to changing 
 the domain a
 Exchange 5.5 server resides in. What I am not clear on is 
 whether you can
 run a site with some servers in one domain and some in the 
 other or whether
 all servers must reside in one domain or the other within the 
 site. Anyone
 had an experience of moving domains?
 
 TIA
 
 Paul
 
 
 --
 If you have received this e-mail in error or wish to read our e-mail 
 disclaimer statement and monitoring policy, please refer to 
 http://www.drkw.com/disc/email/ or contact the sender.
 --
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Public folders problem with 5.5 upgrade

2003-06-26 Thread Marlovits, John [JM1]
It's set to always

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 12:52 AM
To: Exchange Discussions
Subject: RE: Public folders problem with 5.5 upgrade


Then something is keeping replication from happening.  How is public
folder replication schedule configured?

Ed Crowley MCSE+I MVP
Protecting the world from PSTs and bricked backups.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marlovits, John
[JM1]
Sent: Wednesday, June 25, 2003 2:56 PM
To: Exchange Discussions

days

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 4:44 PM
To: Exchange Discussions
Subject: RE: Public folders problem with 5.5 upgrade


How long have you waited?

Ed Crowley MCSE+I MVP
Helping others with Exchange for over a twentieth of a century.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marlovits, John
[JM1]
Sent: Tuesday, June 24, 2003 9:47 AM
To: Exchange Discussions

I'm trying to rehome my public folders from 5.5 to 2k. I've changed the
home site and added the 2000 server to the replication list, and also
have a ADC for public folders. I can see the folders on the 2000 server,
the folders are in AD, but they don't have anything in them. In ESM the
folder size and item list is 0, and they are not accessible from
Outlook. I've checked the public store has an proxyaddress listed in
adsiedit. The servers are in the same site both in exchange and
physically, and the folders are less than a meg. How do I get this moved
over?

Thanks
John




_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread Orin Rehorst
edoxs blocks 0% legitimate messages because they verify all entries in their filter 
are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED] 
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems 
 much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely don't want 
 to block real customers from sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this :
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the 
 program than vice 
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield. 
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month!
   http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface: 
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month!
 http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread Freddie Soerensen
Orin

Who verifies that ?

They never make mistakes ?

Freddie

 
 -Original Message-
 From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
 Sent: Donnerstag, 26. Juni 2003 15:47
 To: Exchange Discussions
 
 edoxs blocks 0% legitimate messages because they verify all 
 entries in their filter are spam.
 
 Regards,
 Orin
 
 
 
 
 -Original Message-
 From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:24 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 Well, you can set up the spamfilter to quarantine the 
 filtered messages for later review and if there should be a 
 legitimate message it can be retrieved.
 
 I don't think there are any spamfilters which blocks 100% 
 spam and 0% legitimate messages.
 
 Freddie
 
  
  -Original Message-
  From: Tigue Williams [mailto:[EMAIL PROTECTED]
  Sent: Mittwoch, 25. Juni 2003 16:46
  To: Exchange Discussions
  
  Has anyone heard or used the surf control product. It seems 
 much more 
  expensive than logstat ISP or XWALL.
  Can anyone mention any differences? We definitely don't 
 want to block 
  real customers from sending us email--just the spam.
  --- Freddie Soerensen [EMAIL PROTECTED]
  wrote:
   Maybe you want to take a look at this :
   http://www.logsat.com/SpamFilter/default.asp
   

   It is easier to change the specification to fit the
  program than vice
   versa. 

   

-Original Message-
From: Tigue Williams [mailto:[EMAIL PROTECTED]
Sent: Dienstag, 24. Juni 2003 23:38
To: Exchange Discussions

Hi all...

We are running Exchange 5.5 and as most of you we
   receive a
lot of spam in the company. My company does not
   want to buy
any spam sofware as it cost a lot of money. Is
   there anything
built into exchange that will help reduce the
   spam? Is there
anything that could be done on the Outlook Client
   that will
reduce the spam?
We are also running GroupShield. 

TIA

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

   
  
  _
List posting FAQ:  
   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
   
  
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=lang=english
To unsubscribe:
   mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

   
  
  _
   List posting FAQ:  
   http://www.swinc.com/resource/exch_faq.htm
   Web Interface:
  
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
  ext_mode=lang=english
   To unsubscribe:
   mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
  
  
  __
  Do you Yahoo!?
  SBC Yahoo! DSL - Now only $29.95 per month!
  http://sbc.yahoo.com
  
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Web Interface: 
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
  ext_mode=lang=english
  To unsubscribe: mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
  
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Slightly OT: Windows 2000 SP4 ...

2003-06-26 Thread Jeff Beckham

Found alink here:

http://www.neowin.net/comments.php?id=12129category=main

which has a link to SP4 here:

http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241
bfecd095e/w2ksp4_en.exe

if it wrapped use:

http://tinyurl.com/f7te


Jeff


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Atkinson, Miles
Posted At: Thursday, June 26, 2003 4:14 AM
Posted To: Exchange Discussion List
Conversation: Slightly OT: Windows 2000 SP4 ...
Subject: Slightly OT: Windows 2000 SP4 ...

... has been released to Premier customers.

Sorry, I don't have a public URL for it, but the fixes are at
http://support.microsoft.com/default.aspx?scid=kb;EN-US;327194, Exchange
is mentioned a couple of times.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Slightly OT: Windows 2000 SP4 ...

2003-06-26 Thread Martin Tuip [MVP]
As always .. please test it in your lab first AND read the release notes.

**  Please prefix your subject header with BETA for posts dealing with
Exchange 2003 **
--
Martin Tuip
MVP Exchange
Exchange 2000 List owner
www.exchange-mail.org
www.sharepointserver.com
[EMAIL PROTECTED]
--

- Original Message - 
From: Jeff Beckham [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 4:30 PM
Subject: RE: Slightly OT: Windows 2000 SP4 ...



Found alink here:

http://www.neowin.net/comments.php?id=12129category=main

which has a link to SP4 here:

http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241
bfecd095e/w2ksp4_en.exe

if it wrapped use:

http://tinyurl.com/f7te


Jeff


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Atkinson, Miles
Posted At: Thursday, June 26, 2003 4:14 AM
Posted To: Exchange Discussion List
Conversation: Slightly OT: Windows 2000 SP4 ...
Subject: Slightly OT: Windows 2000 SP4 ...

... has been released to Premier customers.

Sorry, I don't have a public URL for it, but the fixes are at
http://support.microsoft.com/default.aspx?scid=kb;EN-US;327194, Exchange
is mentioned a couple of times.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


OOOF Outlook98 and Exchange 2000

2003-06-26 Thread Exchange Discussion

I have an issue with one user in that they set Out Of Office, but it doesn't work. 
Although it informs them that it is on, if a mail is sent to them no OOO is received 
in reply. 

Server: 1 Exchange 2000 Sp3
 Mailbox limit set to 280Mb

Client  NT4 SP6 Outlook 98 (8.5.6614.0)
Mailbox size 86Mb

We use roaming profiles, we have set his profile from scratch just in case, although 
it is a server side function. 

I would be grateful for any advice that may point me in the right direction.

David


Registered Office: Hillfields, Burghfield Common, Reading, Berkshire, RG7 3YG 
Registered Charity No. 209617 
A company limited by guarantee 
Registered in England Company No. 291646


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Exchange 5.5 Licensing

2003-06-26 Thread Stew Leonard
Can anyone explain how Exchange 5.5 licensing works.
If we need to have 250 users mailboxes do we need 250
licenses? Is is based on concurrent users--for example
if a company has 1000 mailboxes but at any point only
50 people are connected to the exchange server do you
only need 50 licenses?
 
Its a bit confusing, I am sure many of you will agree.
We definitely want to make sure we do this the right
way.
 
Many thanks.
 
Stew




__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread Christopher Hummert
Nothing in life is ever 100%. I would be worried about any company that
claimed their product worked 100% of the time

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Thursday, June 26, 2003 6:47 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


edoxs blocks 0% legitimate messages because they verify all entries in
their filter are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems
 much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely don't want 
 to block real customers from sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this : 
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the
 program than vice
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface: 
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month!
 http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread Mellott, Bill
Death and Taxes = 100%

-Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:21 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Nothing in life is ever 100%. I would be worried about any company that
claimed their product worked 100% of the time

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Thursday, June 26, 2003 6:47 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


edoxs blocks 0% legitimate messages because they verify all entries in
their filter are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems
 much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely don't want 
 to block real customers from sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this : 
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the
 program than vice
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface: 
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month!
 http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: OOOF Outlook98 and Exchange 2000

2003-06-26 Thread Ben Winzenz
Does it not work period, or does it just not work when receiving mail
from the Internet?  Exchange 2000 (and 5.5) have a feature that allows
you to turn off Out of Office responses to the Internet.  Exchange 2000
has this turned off by default.  If OOF is working inside the office,
but not outside, this would be the problem.
-

Ben Winzenz
Network Engineer
Gardner  White
(317) 581-1580 ext 418

Original Message-
From: Exchange Discussion [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 5:54 AM
Posted To: Exchange (Swynk)
Conversation: Out of Office Outlook98 and Exchange 2000
Subject: OOOF Outlook98 and Exchange 2000



I have an issue with one user in that they set Out Of Office, but it
doesn't work. Although it informs them that it is on, if a mail is sent
to them no OOO is received in reply. 

Server: 1 Exchange 2000 Sp3
 Mailbox limit set to 280Mb

Client  NT4 SP6 Outlook 98 (8.5.6614.0)
Mailbox size 86Mb

We use roaming profiles, we have set his profile from scratch just in
case, although it is a server side function. 

I would be grateful for any advice that may point me in the right
direction.

David


Registered Office: Hillfields, Burghfield Common, Reading, Berkshire,
RG7 3YG Registered Charity No. 209617 A company limited by guarantee
Registered in England Company No. 291646


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: how to cut down on spam

2003-06-26 Thread Bob Sadler
CMH winners don't pay taxes :)



Bob Sadler
City of Leawood, KS, USA
WAN/Internet Specialist
913-339-6700 x194


-Original Message-
From: Mellott, Bill [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:34 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Death and Taxes = 100%

-Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:21 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Nothing in life is ever 100%. I would be worried about any company that
claimed their product worked 100% of the time

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Thursday, June 26, 2003 6:47 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


edoxs blocks 0% legitimate messages because they verify all entries in
their filter are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems much more 
 expensive than logstat ISP or XWALL. Can anyone mention any 
 differences? We definitely don't want to block real customers from 
 sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this :
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the
 program than vice
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface:
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:

RE: how to cut down on spam

2003-06-26 Thread Christopher Hummert
The country could go into civil war, so it's possible that you wouldn't
pay taxes then since no one would be around to collect them. Unlikely
but possible. Therefore I still stand my original statement

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mellott, Bill
Sent: Thursday, June 26, 2003 8:34 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Death and Taxes = 100%

-Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:21 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Nothing in life is ever 100%. I would be worried about any company that
claimed their product worked 100% of the time

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Thursday, June 26, 2003 6:47 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


edoxs blocks 0% legitimate messages because they verify all entries in
their filter are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems much more 
 expensive than logstat ISP or XWALL. Can anyone mention any 
 differences? We definitely don't want to block real customers from 
 sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this :
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the
 program than vice
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface:
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 Licensing

2003-06-26 Thread Matt Hoffman
You need to have as many CALs (client access licenses) as you do users who
will connect.  As far as I know each user must have their own CAL.  Terminal
Services works the way you're suggesting, but not this.  

You might not be able to buy a 5.5 CAL anymore...  You may have to buy
Exchange 2000 CALs (isn't there a Exchange 2003 coming out?  In that case
buy THOSE CALs), since a CAL is backwardly compatible.

Matt

-Original Message-
From: Stew Leonard [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 8:55 AM
To: Exchange Discussions
Subject: Exchange 5.5 Licensing


Can anyone explain how Exchange 5.5 licensing works.
If we need to have 250 users mailboxes do we need 250
licenses? Is is based on concurrent users--for example
if a company has 1000 mailboxes but at any point only
50 people are connected to the exchange server do you
only need 50 licenses?
 
Its a bit confusing, I am sure many of you will agree.
We definitely want to make sure we do this the right
way.
 
Many thanks.
 
Stew




__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Slightly OT: Windows 2000 SP4 ...

2003-06-26 Thread Atkinson, Miles
Going no-where near the production system until some other mug(s) have
done all the testing first. ;-)



As always .. please test it in your lab first AND read the release
notes.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 Licensing

2003-06-26 Thread hawkinsgp
Yes, that's correct - the 5.5 CALs are no longer available, but the
Exchange 2K CALs entitle you to use downlevel versions of the product. 
If you have 250 users and one Exchange server, purchase one server license
and 250 CALs.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Exchange 5.5 Changing Domains

2003-06-26 Thread hawkinsgp
The domain is all but irrelevant.  All the Exchange servers care about
really is the sites and site connectors.  It's users, particularly those
using OWA, who need to worry about the domain.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 IMS vs. Windows 2000 SMTP

2003-06-26 Thread Nizar El-Assaad
Thanks for the info. I should have prepared my homework better!

Best Regards
Nizar El-Assaad


-Original Message-
From: Andrew Chan [mailto:[EMAIL PROTECTED] 
Posted At: Wednesday, June 25, 2003 10:03 PM
Posted To: Lyris MS Exchange Discussions
Conversation: Exchange 5.5 IMS vs. Windows 2000 SMTP
Subject: RE: Exchange 5.5 IMS vs. Windows 2000 SMTP


Yes.  All you need to do is to set different remote domains under the
SMTP virtual server.  Be careful, though, do NOT check the allow
incoming mail to be relayed to this domain for domains that you are not
receiving mail for.

Andrew
MCSE (w2k/nt4) + CCNA 

 -Original Message-
 From: Nizar El-Assaad [mailto:[EMAIL PROTECTED]
 Posted At: Wednesday, June 25, 2003 10:04 AM
 Posted To: ExchangeDiscussion
 Conversation: Exchange 5.5 IMS vs. Windows 2000 SMTP
 Subject: Exchange 5.5 IMS vs. Windows 2000 SMTP
 
 
 Hello
 
 I have an Exchange 5.5 server configured to send internet
 messages using DNS, except for a couple of domains, that are 
 configured to be forwarded to a relay host instead (the 
 configuration is done in Exchange 5.5 IMS). Now, I have put 
 my Exchange server behind a firewall and configured it to 
 forward all messages to a mail relay host in the DMZ. The 
 mail relay is using the simple Windows 2000 SMTP service. Is 
 it possible to do the same configuration for the Windows 2000 
 SMTP service (i.e. use DNS to deliver messages except for 
 some domains)? If not, is it possible for Windows 2000 SMTP 
 to forward all mail to a relay server instead of using DNS to 
 deliver them? Thank you for the precious help.
 
 Best Regards
 Nizar El-Assaad
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

This email and any files transmitted with it are intended solely for the
recipient. If you are not the named addressee you should not
disseminate, distribute, copy or alter this email.

All messages are processed to reduce SPAM and Viruses.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread hawkinsgp
I highly recommend going to one of the sites like mailabuse.org and
following their directions to verify that you're not an open relay BEFORE
you get blacklisted.  It can be a real pain to get off all the blacklists,
and your users will scream bloody murder.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


OT: Anti Virus Feedback

2003-06-26 Thread Chris H
Does anyone have any experience with Panda Anti Virus on the server
(exchange or file) or desktop they would be willing to share? We are
considering them as a product to use and I am looking for good/bad
experiences.

tia

chris


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Closing Outlook doesn't kill process

2003-06-26 Thread hawkinsgp
I'd do a complete uninstall of Outlook 2002, then reinstall it, preferably
from different source media.  It's possible the initial installation got a
bit hosed.

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Open Relay Suggestions

2003-06-26 Thread Chris H
I am using Interscan Virus wall as my incoming smtp server on port 25; which
then forwards my mail to the Exchange IMC on port 6000. I have been testing
against open relay testers and I always fail the one or two tests where they
spam my domain name. I am assuming this is because Interscan cannot look up
usernames to see if the mailbox is valid? For that matter I dont think
Exchange 5.5's IMC does either?

Anyway to close this last hole? Suggestions? I worked hard to get off all
the RBL's the last mail admin had gotten us on  . . .

tia

chris

 RSET
 250 web3: Reset State
 MAIL FROM:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Sender Ok
 RCPT TO:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Recipient Ok


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 Licensing

2003-06-26 Thread Chinnery, Paul
Some time ago (I believe it was last year), I listened to a webcast put on by 
Microsoft.  During the Q  A, one person asked the Microsoft rep what the licensing 
requirement would be for the following scenario:

5 Mailboxes all being accessed from 1 computer
His answer: 1 license because only 1 machine was used.

Which just goes to show, as had been said mb people much more experienced with 
Exchange than me, that it all depends on who you talk to and that you should always 
direct licensing questions to your Microsoft representative. 


Paul Chinnery
Network Administrator
Mem Med Ctr


-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:42 AM
To: Exchange Discussions
Subject: RE: Exchange 5.5 Licensing


You need to have as many CALs (client access licenses) as you do users who
will connect.  As far as I know each user must have their own CAL.  Terminal
Services works the way you're suggesting, but not this.  

You might not be able to buy a 5.5 CAL anymore...  You may have to buy
Exchange 2000 CALs (isn't there a Exchange 2003 coming out?  In that case
buy THOSE CALs), since a CAL is backwardly compatible.

Matt

-Original Message-
From: Stew Leonard [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 8:55 AM
To: Exchange Discussions
Subject: Exchange 5.5 Licensing


Can anyone explain how Exchange 5.5 licensing works.
If we need to have 250 users mailboxes do we need 250
licenses? Is is based on concurrent users--for example
if a company has 1000 mailboxes but at any point only
50 people are connected to the exchange server do you
only need 50 licenses?
 
Its a bit confusing, I am sure many of you will agree.
We definitely want to make sure we do this the right
way.
 
Many thanks.
 
Stew




__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Exchange 5.5 Licensing

2003-06-26 Thread Chris H
that is what I was told as well by my rep. It is now a CAL per device that
connects. So if a person at one computer opens 5 mailboxes in Outlook it is
only 1 CAL.

- Original Message - 
From: Chinnery, Paul [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 12:31 PM
Subject: RE: Exchange 5.5 Licensing


Some time ago (I believe it was last year), I listened to a webcast put on
by Microsoft.  During the Q  A, one person asked the Microsoft rep what the
licensing requirement would be for the following scenario:

5 Mailboxes all being accessed from 1 computer
His answer: 1 license because only 1 machine was used.

Which just goes to show, as had been said mb people much more experienced
with Exchange than me, that it all depends on who you talk to and that you
should always direct licensing questions to your Microsoft representative.


Paul Chinnery
Network Administrator
Mem Med Ctr


-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:42 AM
To: Exchange Discussions
Subject: RE: Exchange 5.5 Licensing


You need to have as many CALs (client access licenses) as you do users who
will connect.  As far as I know each user must have their own CAL.  Terminal
Services works the way you're suggesting, but not this.

You might not be able to buy a 5.5 CAL anymore...  You may have to buy
Exchange 2000 CALs (isn't there a Exchange 2003 coming out?  In that case
buy THOSE CALs), since a CAL is backwardly compatible.

Matt

-Original Message-
From: Stew Leonard [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 8:55 AM
To: Exchange Discussions
Subject: Exchange 5.5 Licensing


Can anyone explain how Exchange 5.5 licensing works.
If we need to have 250 users mailboxes do we need 250
licenses? Is is based on concurrent users--for example
if a company has 1000 mailboxes but at any point only
50 people are connected to the exchange server do you
only need 50 licenses?

Its a bit confusing, I am sure many of you will agree.
We definitely want to make sure we do this the right
way.

Many thanks.

Stew




__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Woods, Tony
I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive 
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or
 whatever. It's just random letters in front of the domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed 
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not 
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of 
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default 
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus 
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Christopher Hummert
I tested it using abuse.net's relay test. It looks like your good for
not being an open relay. So my opinion is that you just have a spammer
who's trying to mine for address in your company. From what I
understand, there's a new program going around the spammer world, that
bruteforce guesses e-mail address and collects the NDR's from that
domain to determine what's legit and what isn't. My advise would be for
you to trace back the IP address he's using and put it in your host.deny
file.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Woods, Tony
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...
Importance: High


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue.
I guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet
would be to turn off the notification on your IMS for E-mail address
could not be found.  For #2, yes they will sit in the queue until they
are delivered or just time out.  For #1, are you sure you're not an open
relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_M
S_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but
over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or
 whatever. It's just random letters in front of the domain name
@dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Changing Passwords using OWA

2003-06-26 Thread Bridges, Samantha
Exchange 5.5 sp4
Windows 2000 Server


I setup SSL on my OWA server.  SSL is working fine.  However, when I click
on the box to change my password via OWA, I get the following webpage.

The page cannot be displayed
HTTP 500 Internal server error Internet Explorer

Any ideas?  

Thanks

Samantha

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Changing Passwords using OWA

2003-06-26 Thread Dryden, Karen
Search Technet for what you wrote in the subject of this note or for
article 327134.

-Original Message-
From: Bridges, Samantha [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 1:29 PM
To: Exchange Discussions
Subject: Changing Passwords using OWA


Exchange 5.5 sp4
Windows 2000 Server


I setup SSL on my OWA server.  SSL is working fine.  However, when I
click on the box to change my password via OWA, I get the following
webpage.

The page cannot be displayed
HTTP 500 Internal server error Internet Explorer

Any ideas?  

Thanks

Samantha

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Blunt, James H (Jim)
Tony,

Open up the properties page of your IMS Connection, go to the Internet Mail
tab and click on the Notifications... button.  My guess would be that you
have the Always send notifications when non-delivery reports are generated
radio button clicked.  If that is the case, select the second choice and
uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying to
brute force their spam through the system.  I track the NDRs to create a
spreadsheet for management, showing them the exponential growth of spam and
the load it is placing on the servers, in order to justify new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or
 whatever. It's just random letters in front of the domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL 

RE: Open Relay Suggestions

2003-06-26 Thread Chris Scharff
Those aren't holes. One can legitimately accept mail for those addresses
and as long as it isn't relayed to the final destination the server is
relay secure. The designers of those tests have implemented their
testing criteria improperly.

-Original Message-
From: Chris H [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 11:23 AM
Posted To: swynk
Conversation: Open Relay Suggestions
Subject: Open Relay Suggestions


I am using Interscan Virus wall as my incoming smtp server on port 25;
which then forwards my mail to the Exchange IMC on port 6000. I have
been testing against open relay testers and I always fail the one or two
tests where they spam my domain name. I am assuming this is because
Interscan cannot look up usernames to see if the mailbox is valid? For
that matter I dont think Exchange 5.5's IMC does either?

Anyway to close this last hole? Suggestions? I worked hard to get off
all the RBL's the last mail admin had gotten us on  . . .

tia

chris

 RSET
 250 web3: Reset State
 MAIL FROM:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Sender Ok
 RCPT TO:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Recipient Ok


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 5.5 Licensing

2003-06-26 Thread Matt Hoffman
This certainly could have changed, since Microsoft is famouse for altering
their licensing arrangements.  At the time I bought CALs, we had to purchase
them one per user.  

If MS really has made this change, then this is definitely a good thing.

Matt

-Original Message-
From: Chris H [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 12:56 PM
To: Exchange Discussions
Subject: Re: Exchange 5.5 Licensing


that is what I was told as well by my rep. It is now a CAL per device that
connects. So if a person at one computer opens 5 mailboxes in Outlook it is
only 1 CAL.

- Original Message - 
From: Chinnery, Paul [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 12:31 PM
Subject: RE: Exchange 5.5 Licensing


Some time ago (I believe it was last year), I listened to a webcast put on
by Microsoft.  During the Q  A, one person asked the Microsoft rep what the
licensing requirement would be for the following scenario:

5 Mailboxes all being accessed from 1 computer
His answer: 1 license because only 1 machine was used.

Which just goes to show, as had been said mb people much more experienced
with Exchange than me, that it all depends on who you talk to and that you
should always direct licensing questions to your Microsoft representative.


Paul Chinnery
Network Administrator
Mem Med Ctr


-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:42 AM
To: Exchange Discussions
Subject: RE: Exchange 5.5 Licensing


You need to have as many CALs (client access licenses) as you do users who
will connect.  As far as I know each user must have their own CAL.  Terminal
Services works the way you're suggesting, but not this.

You might not be able to buy a 5.5 CAL anymore...  You may have to buy
Exchange 2000 CALs (isn't there a Exchange 2003 coming out?  In that case
buy THOSE CALs), since a CAL is backwardly compatible.

Matt

-Original Message-
From: Stew Leonard [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 8:55 AM
To: Exchange Discussions
Subject: Exchange 5.5 Licensing


Can anyone explain how Exchange 5.5 licensing works.
If we need to have 250 users mailboxes do we need 250
licenses? Is is based on concurrent users--for example
if a company has 1000 mailboxes but at any point only
50 people are connected to the exchange server do you
only need 50 licenses?

Its a bit confusing, I am sure many of you will agree.
We definitely want to make sure we do this the right
way.

Many thanks.

Stew




__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Open Relay Suggestions

2003-06-26 Thread Matt Hoffman
We used to use Netscape's mail server back when it was free for educational
use.  At the time, we did have a closed relay system, but since our server
wouldn't respond with a 550, we got blacklisted.  It took us quite a lot of
effort to get the various Anti-relay sites to accept that we were a closed
relay.  

-Original Message-
From: Chris Scharff [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 2:22 PM
To: Exchange Discussions
Subject: RE: Open Relay Suggestions


Those aren't holes. One can legitimately accept mail for those addresses and
as long as it isn't relayed to the final destination the server is relay
secure. The designers of those tests have implemented their testing criteria
improperly.

-Original Message-
From: Chris H [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 11:23 AM
Posted To: swynk
Conversation: Open Relay Suggestions
Subject: Open Relay Suggestions


I am using Interscan Virus wall as my incoming smtp server on port 25; which
then forwards my mail to the Exchange IMC on port 6000. I have been testing
against open relay testers and I always fail the one or two tests where they
spam my domain name. I am assuming this is because Interscan cannot look up
usernames to see if the mailbox is valid? For that matter I dont think
Exchange 5.5's IMC does either?

Anyway to close this last hole? Suggestions? I worked hard to get off all
the RBL's the last mail admin had gotten us on  . . .

tia

chris

 RSET
 250 web3: Reset State
 MAIL FROM:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Sender Ok
 RCPT TO:[EMAIL PROTECTED]
 250 [EMAIL PROTECTED]: Recipient Ok


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Odd SMTP problem

2003-06-26 Thread Paul Adams
We have an Exchange 5.5 SP4 server running on an NT4 SP6a (with rollups) box
that has been very happy for a couple years now.  As far as our users are
concerned all is well but for the last few weeks none of our reporting
software will deliver mail through the server.  By this I mean I have an old
copy of WhatsUp running on another box.  It should send warning messages to
a group on my exchange box using SMTP.  It no longer functions.  I also
noticed that if I telnet to port 25 on the exchange box it takes a good 10 -
20 seconds to respond to me.  Once it responds initially it's fine.  I
suspect that this delay is causing my reporting software to time out.  I
cranked up the amount of simultaneous connections that are allowed on the
server slightly but that didn't seem to have any affect.  Anyone have any
idea of why this might be happening and what I might try to fix it?

Thanks!
Paul Adams
Network Support Specialist
Unicare Corporation
1457 E. 40th Street
Cleveland, OH 44103
Phone: 216-426-3535 x.1165
Email: [EMAIL PROTECTED]


UNICARE CORPORATION CONFIDENTIALITY NOTICE: This e-mail message, including
any attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized review,
use, disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all copies
of the original message. 



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Ben Winzenz
boggle

You tested someone else's domain at abuse.net without permission?  You
do realize that if it would have failed other tests, they get put on
RBL's?  Not a move I would have made.  Yikes.
-

Ben Winzenz
Network Engineer
Gardner  White
(317) 581-1580 ext 418

Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 12:19 PM
Posted To: Exchange (Swynk)
Conversation: Not Open Relay, but...
Subject: RE: Not Open Relay, but...


I tested it using abuse.net's relay test. It looks like your good for
not being an open relay. So my opinion is that you just have a spammer
who's trying to mine for address in your company. From what I
understand, there's a new program going around the spammer world, that
bruteforce guesses e-mail address and collects the NDR's from that
domain to determine what's legit and what isn't. My advise would be for
you to trace back the IP address he's using and put it in your host.deny
file.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Woods, Tony
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...
Importance: High


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue.
I guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet
would be to turn off the notification on your IMS for E-mail address
could not be found.  For #2, yes they will sit in the queue until they
are delivered or just time out.  For #1, are you sure you're not an open
relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_M
S_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but
over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or
 whatever. It's just random letters in front of the domain name
@dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

RE: Not Open Relay, but...

2003-06-26 Thread Christopher Hummert
It's the testing one. Not the one that puts people on the list


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ben Winzenz
Sent: Thursday, June 26, 2003 12:01 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


boggle

You tested someone else's domain at abuse.net without permission?  You
do realize that if it would have failed other tests, they get put on
RBL's?  Not a move I would have made.  Yikes.
-

Ben Winzenz
Network Engineer
Gardner  White
(317) 581-1580 ext 418

Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 12:19 PM
Posted To: Exchange (Swynk)
Conversation: Not Open Relay, but...
Subject: RE: Not Open Relay, but...


I tested it using abuse.net's relay test. It looks like your good for
not being an open relay. So my opinion is that you just have a spammer
who's trying to mine for address in your company. From what I
understand, there's a new program going around the spammer world, that
bruteforce guesses e-mail address and collects the NDR's from that
domain to determine what's legit and what isn't. My advise would be for
you to trace back the IP address he's using and put it in your host.deny
file.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Woods, Tony
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...
Importance: High


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue.
I guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet
would be to turn off the notification on your IMS for E-mail address
could not be found.  For #2, yes they will sit in the queue until they
are delivered or just time out.  For #1, are you sure you're not an open
relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_M
S_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive 
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but
over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or

 whatever. It's just random letters in front of the domain name
@dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed 
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not 
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of 
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default 
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus 
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: 

Re: Odd SMTP problem

2003-06-26 Thread Andy David
Check DNS and the hosts file on the Whazzup box.

- Original Message - 
From: Paul Adams [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 2:58 PM
Subject: Odd SMTP problem


 We have an Exchange 5.5 SP4 server running on an NT4 SP6a (with rollups)
box
 that has been very happy for a couple years now.  As far as our users are
 concerned all is well but for the last few weeks none of our reporting
 software will deliver mail through the server.  By this I mean I have an
old
 copy of WhatsUp running on another box.  It should send warning messages
to
 a group on my exchange box using SMTP.  It no longer functions.  I also
 noticed that if I telnet to port 25 on the exchange box it takes a good
10 -
 20 seconds to respond to me.  Once it responds initially it's fine.  I
 suspect that this delay is causing my reporting software to time out.  I
 cranked up the amount of simultaneous connections that are allowed on the
 server slightly but that didn't seem to have any affect.  Anyone have any
 idea of why this might be happening and what I might try to fix it?

 Thanks!
 Paul Adams
 Network Support Specialist
 Unicare Corporation
 1457 E. 40th Street
 Cleveland, OH 44103
 Phone: 216-426-3535 x.1165
 Email: [EMAIL PROTECTED]


 UNICARE CORPORATION CONFIDENTIALITY NOTICE: This e-mail message, including
 any attachments, is for the sole use of the intended recipient(s) and may
 contain confidential and privileged information. Any unauthorized review,
 use, disclosure or distribution is prohibited. If you are not the intended
 recipient, please contact the sender by reply e-mail and destroy all
copies
 of the original message.



 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Ben Winzenz
It's still not something I would have done.  If you are going to test
someone else's domain that you don't own, then you really ought to
manually test it.  If you are using a 3rd party tool, then you don't
have any control over whether they send domain names that fail the relay
tests to RBL's.
-

Ben Winzenz
Network Engineer
Gardner  White
(317) 581-1580 ext 418

Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, June 26, 2003 2:04 PM
Posted To: Exchange (Swynk)
Conversation: Not Open Relay, but...
Subject: RE: Not Open Relay, but...


It's the testing one. Not the one that puts people on the list


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ben Winzenz
Sent: Thursday, June 26, 2003 12:01 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


boggle

You tested someone else's domain at abuse.net without permission?  You
do realize that if it would have failed other tests, they get put on
RBL's?  Not a move I would have made.  Yikes.
-

Ben Winzenz
Network Engineer
Gardner  White
(317) 581-1580 ext 418

Original Message-
From: Christopher Hummert [mailto:[EMAIL PROTECTED] Posted At:
Thursday, June 26, 2003 12:19 PM Posted To: Exchange (Swynk)
Conversation: Not Open Relay, but...
Subject: RE: Not Open Relay, but...


I tested it using abuse.net's relay test. It looks like your good for
not being an open relay. So my opinion is that you just have a spammer
who's trying to mine for address in your company. From what I
understand, there's a new program going around the spammer world, that
bruteforce guesses e-mail address and collects the NDR's from that
domain to determine what's legit and what isn't. My advise would be for
you to trace back the IP address he's using and put it in your host.deny
file.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Woods, Tony
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...
Importance: High


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue.
I guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet
would be to turn off the notification on your IMS for E-mail address
could not be found.  For #2, yes they will sit in the queue until they
are delivered or just time out.  For #1, are you sure you're not an open
relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_M
S_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive 
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but
over
 2000 an hour? Each of these messages is addressed to [EMAIL PROTECTED] or

 whatever. It's just random letters in front of the domain name
@dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed 
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not 
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of 
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default 
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus 
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 

Re: Exchange 5.5 Licensing

2003-06-26 Thread Dave Mills
I believe that starting with Exchange 2003 you can buy CALs on a per-mailbox
or per-device basis; but as always, ask your MS rep to be sure.  In the case
of the company I work for it's actually cheaper to license on a per-user
since lots of users access their mailboxes from multiple machines.

- Dave

- Original Message - 
From: Matt Hoffman [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:25 AM
Subject: RE: Exchange 5.5 Licensing


 This certainly could have changed, since Microsoft is famouse for altering
 their licensing arrangements.  At the time I bought CALs, we had to
purchase
 them one per user.

 If MS really has made this change, then this is definitely a good thing.

 Matt

 -Original Message-
 From: Chris H [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 12:56 PM
 To: Exchange Discussions
 Subject: Re: Exchange 5.5 Licensing


 that is what I was told as well by my rep. It is now a CAL per device
that
 connects. So if a person at one computer opens 5 mailboxes in Outlook it
is
 only 1 CAL.

 - Original Message - 
 From: Chinnery, Paul [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 12:31 PM
 Subject: RE: Exchange 5.5 Licensing


 Some time ago (I believe it was last year), I listened to a webcast put on
 by Microsoft.  During the Q  A, one person asked the Microsoft rep what
the
 licensing requirement would be for the following scenario:

 5 Mailboxes all being accessed from 1 computer
 His answer: 1 license because only 1 machine was used.

 Which just goes to show, as had been said mb people much more experienced
 with Exchange than me, that it all depends on who you talk to and that you
 should always direct licensing questions to your Microsoft representative.


 Paul Chinnery
 Network Administrator
 Mem Med Ctr


 -Original Message-
 From: Matt Hoffman [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 11:42 AM
 To: Exchange Discussions
 Subject: RE: Exchange 5.5 Licensing


 You need to have as many CALs (client access licenses) as you do users who
 will connect.  As far as I know each user must have their own CAL.
Terminal
 Services works the way you're suggesting, but not this.

 You might not be able to buy a 5.5 CAL anymore...  You may have to buy
 Exchange 2000 CALs (isn't there a Exchange 2003 coming out?  In that case
 buy THOSE CALs), since a CAL is backwardly compatible.

 Matt

 -Original Message-
 From: Stew Leonard [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 8:55 AM
 To: Exchange Discussions
 Subject: Exchange 5.5 Licensing


 Can anyone explain how Exchange 5.5 licensing works.
 If we need to have 250 users mailboxes do we need 250
 licenses? Is is based on concurrent users--for example
 if a company has 1000 mailboxes but at any point only
 50 people are connected to the exchange server do you
 only need 50 licenses?

 Its a bit confusing, I am sure many of you will agree.
 We definitely want to make sure we do this the right
 way.

 Many thanks.

 Stew




 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang

 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]


 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   

RE: Not Open Relay, but...

2003-06-26 Thread Woods, Tony
Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
messages sitting in the IMS queue after 8hrs? I have another site where the
IMS has hardly any messages sitting in there so this is why I am concerned.
What if I changed the MX record's IP address, would that help slow it down a
little or are they just using dfg.com?

Cheers,
Tony

-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:10 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Tony,

Open up the properties page of your IMS Connection, go to the Internet Mail
tab and click on the Notifications... button.  My guess would be that you
have the Always send notifications when non-delivery reports are generated
radio button clicked.  If that is the case, select the second choice and
uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying to
brute force their spam through the system.  I track the NDRs to create a
spreadsheet for management, showing them the exponential growth of spam and
the load it is placing on the servers, in order to justify new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive 
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but 
 over 2000 an hour? Each of these messages is addressed to 
 [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
 domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed 
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not 
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of 
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default 
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus 
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 

RE: how to cut down on spam

2003-06-26 Thread Orin Rehorst
Did our homework. 300 users on Brightmail for 5 months. No false positives. With the 
first one...Brightmail is outta' here!

orin rehorst

 -Original Message-
From:   Christopher Hummert [mailto:[EMAIL PROTECTED] 
Sent:   Thursday, June 26, 2003 10:21 AM
To: Exchange Discussions
Subject:RE: how to cut down on spam

Nothing in life is ever 100%. I would be worried about any company that
claimed their product worked 100% of the time

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Thursday, June 26, 2003 6:47 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


edoxs blocks 0% legitimate messages because they verify all entries in
their filter are spam.

Regards,
Orin




-Original Message-
From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 1:24 AM
To: Exchange Discussions
Subject: RE: how to cut down on spam


Well, you can set up the spamfilter to quarantine the filtered messages
for later review and if there should be a legitimate message it can be
retrieved.

I don't think there are any spamfilters which blocks 100% spam and 0%
legitimate messages.

Freddie

 
 -Original Message-
 From: Tigue Williams [mailto:[EMAIL PROTECTED]
 Sent: Mittwoch, 25. Juni 2003 16:46
 To: Exchange Discussions
 
 Has anyone heard or used the surf control product. It seems
 much more expensive than logstat ISP or XWALL.
 Can anyone mention any differences? We definitely don't want 
 to block real customers from sending us email--just the spam.
 --- Freddie Soerensen [EMAIL PROTECTED]
 wrote:
  Maybe you want to take a look at this : 
  http://www.logsat.com/SpamFilter/default.asp
  
   
  It is easier to change the specification to fit the
 program than vice
  versa. 
   
  
   
   -Original Message-
   From: Tigue Williams [mailto:[EMAIL PROTECTED]
   Sent: Dienstag, 24. Juni 2003 23:38
   To: Exchange Discussions
   
   Hi all...
   
   We are running Exchange 5.5 and as most of you we
  receive a
   lot of spam in the company. My company does not
  want to buy
   any spam sofware as it cost a lot of money. Is
  there anything
   built into exchange that will help reduce the
  spam? Is there
   anything that could be done on the Outlook Client
  that will
   reduce the spam?
   We are also running GroupShield.
   
   TIA
   
   __
   Do you Yahoo!?
   SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
   
  
 
 _
   List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
   Web Interface: 
  
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
   ext_mode=lang=english
   To unsubscribe:
  mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
   
  
 
 _
  List posting FAQ:  
  http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
  To unsubscribe:
  mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
 
 
 __
 Do you Yahoo!?
 SBC Yahoo! DSL - Now only $29.95 per month!
 http://sbc.yahoo.com
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface: 
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
 ext_mode=lang=english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Not Open Relay, but...

2003-06-26 Thread Christopher Hummert
Your best solution is to find out the source of those messages, and then
block the domain,

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Woods, Tony
Sent: Thursday, June 26, 2003 1:37 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
messages sitting in the IMS queue after 8hrs? I have another site where
the IMS has hardly any messages sitting in there so this is why I am
concerned. What if I changed the MX record's IP address, would that help
slow it down a little or are they just using dfg.com?

Cheers,
Tony

-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:10 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Tony,

Open up the properties page of your IMS Connection, go to the Internet
Mail tab and click on the Notifications... button.  My guess would be
that you have the Always send notifications when non-delivery reports
are generated radio button clicked.  If that is the case, select the
second choice and uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying
to brute force their spam through the system.  I track the NDRs to
create a spreadsheet for management, showing them the exponential growth
of spam and the load it is placing on the servers, in order to justify
new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue.
I guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet
would be to turn off the notification on your IMS for E-mail address
could not be found.  For #2, yes they will sit in the queue until they
are delivered or just time out.  For #1, are you sure you're not an open
relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_M
S_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but 
 over 2000 an hour? Each of these messages is addressed to 
 [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
 domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   

RE: Not Open Relay, but...

2003-06-26 Thread Blunt, James H (Jim)
H...well it would be for me, but then again, I'm not sure I have the
qualifications to answer that question.  We are a small company (and getting
smaller by the day!) of roughly 600 people.  If you're a big company, you
may be getting significantly larger numbers of messages sitting in you IMS
queue.  

Our current time-out period for attempting delivery is 72 hours.  Until that
time expires, they WILL sit in the IMS queue awaiting delivery.  Then they
will generate a non-delivery notification to your Admin mailbox.  I would
probably get a lot more of those sitting in my queue, if I didn't have so
many spam domains in my block list.  That and the fact that I delete them at
least once a day.

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 1:37 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
messages sitting in the IMS queue after 8hrs? I have another site where the
IMS has hardly any messages sitting in there so this is why I am concerned.
What if I changed the MX record's IP address, would that help slow it down a
little or are they just using dfg.com?

Cheers,
Tony

-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:10 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Tony,

Open up the properties page of your IMS Connection, go to the Internet Mail
tab and click on the Notifications... button.  My guess would be that you
have the Always send notifications when non-delivery reports are generated
radio button clicked.  If that is the case, select the second choice and
uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying to
brute force their spam through the system.  I track the NDRs to create a
spreadsheet for management, showing them the exponential growth of spam and
the load it is placing on the servers, in order to justify new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but 
 over 2000 an hour? Each of these messages is addressed to 
 [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
 domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of 

RE: Not Open Relay, but...

2003-06-26 Thread Blunt, James H (Jim)
They're just using dfg.com.  Don't bother your MX record.

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 1:37 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
messages sitting in the IMS queue after 8hrs? I have another site where the
IMS has hardly any messages sitting in there so this is why I am concerned.
What if I changed the MX record's IP address, would that help slow it down a
little or are they just using dfg.com?

Cheers,
Tony

-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:10 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Tony,

Open up the properties page of your IMS Connection, go to the Internet Mail
tab and click on the Notifications... button.  My guess would be that you
have the Always send notifications when non-delivery reports are generated
radio button clicked.  If that is the case, select the second choice and
uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying to
brute force their spam through the system.  I track the NDRs to create a
spreadsheet for management, showing them the exponential growth of spam and
the load it is placing on the servers, in order to justify new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but 
 over 2000 an hour? Each of these messages is addressed to 
 [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
 domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit in the Queue for the default
 time?

 3) For the Inbound Mail Failures,  a lot of them are going to bogus
 addresses like [EMAIL PROTECTED] or [EMAIL PROTECTED] Where are these all 
 coming from?

 Thanks in advance.

 Cheers,
 Tony

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:

http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
 =english
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:


RE: how to cut down on spam

2003-06-26 Thread Steve Molkentin
You forgot one... Tupperware = 100%

themolk.

 -Original Message-
 From: Mellott, Bill [mailto:[EMAIL PROTECTED] 
 Sent: Friday, 27 June 2003 1:34 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 Death and Taxes = 100%
 
 -Original Message-
 From: Christopher Hummert [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 11:21 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 Nothing in life is ever 100%. I would be worried about any 
 company that claimed their product worked 100% of the time
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
 Sent: Thursday, June 26, 2003 6:47 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 edoxs blocks 0% legitimate messages because they verify all 
 entries in their filter are spam.
 
 Regards,
 Orin
 
 
 
 
 -Original Message-
 From: Freddie Soerensen [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:24 AM
 To: Exchange Discussions
 Subject: RE: how to cut down on spam
 
 
 Well, you can set up the spamfilter to quarantine the 
 filtered messages for later review and if there should be a 
 legitimate message it can be retrieved.
 
 I don't think there are any spamfilters which blocks 100% 
 spam and 0% legitimate messages.
 
 Freddie
 
  
  -Original Message-
  From: Tigue Williams [mailto:[EMAIL PROTECTED]
  Sent: Mittwoch, 25. Juni 2003 16:46
  To: Exchange Discussions
  
  Has anyone heard or used the surf control product. It seems 
 much more 
  expensive than logstat ISP or XWALL. Can anyone mention any 
  differences? We definitely don't want to block real customers from 
  sending us email--just the spam.
  --- Freddie Soerensen [EMAIL PROTECTED]
  wrote:
   Maybe you want to take a look at this :
   http://www.logsat.com/SpamFilter/default.asp
   

   It is easier to change the specification to fit the
  program than vice
   versa. 

   

-Original Message-
From: Tigue Williams [mailto:[EMAIL PROTECTED]
Sent: Dienstag, 24. Juni 2003 23:38
To: Exchange Discussions

Hi all...

We are running Exchange 5.5 and as most of you we
   receive a
lot of spam in the company. My company does not
   want to buy
any spam sofware as it cost a lot of money. Is
   there anything
built into exchange that will help reduce the
   spam? Is there
anything that could be done on the Outlook Client
   that will
reduce the spam?
We are also running GroupShield.

TIA

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

   
  
  _
List posting FAQ:  
   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
   
  
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=lang=english
To unsubscribe:
   mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

   
  
  _
   List posting FAQ:  
   http://www.swinc.com/resource/exch_faq.htm
   Web Interface:
  
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
  ext_mode=lang=english
   To unsubscribe:
   mailto:[EMAIL PROTECTED]
   Exchange List admin:[EMAIL PROTECTED]
  
  
  __
  Do you Yahoo!?
  SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
  
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Web Interface:
  http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
  ext_mode=lang=english
  To unsubscribe: mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
  
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Web Interface:
 http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget
ext_mode=
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=;
lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   

RE: Not Open Relay, but...

2003-06-26 Thread Woods, Tony
Thanks. I've also cut down the Notifications to just 'Host not Found'. 

One of the NDR's looks like this


A mail message could not be sent because the following host is unknown:

smdv231.entertainmentmail.net
The message that caused this notification was:


  To:   [EMAIL PROTECTED]
  From: 
  Subject:  Undeliverable: Sales manager or Marketing dept
-

Is this is a Relay, shouldn't I not be accepting it in the first place?

Thanks for all the insight so far...

Cheers,
Tony



-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 1:30 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


They're just using dfg.com.  Don't bother your MX record.

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 1:37 PM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
messages sitting in the IMS queue after 8hrs? I have another site where the
IMS has hardly any messages sitting in there so this is why I am concerned.
What if I changed the MX record's IP address, would that help slow it down a
little or are they just using dfg.com?

Cheers,
Tony

-Original Message-
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:10 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


Tony,

Open up the properties page of your IMS Connection, go to the Internet Mail
tab and click on the Notifications... button.  My guess would be that you
have the Always send notifications when non-delivery reports are generated
radio button clicked.  If that is the case, select the second choice and
uncheck the options that you don't want.

I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying to
brute force their spam through the system.  I track the NDRs to create a
spreadsheet for management, showing them the exponential growth of spam and
the load it is placing on the servers, in order to justify new servers.

Jim

-Original Message-
From: Woods, Tony [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 9:58 AM
To: Exchange Discussions
Subject: RE: Not Open Relay, but...


I've tested via telnet and from home using Outlook Express and it always
replies with 550 so I think I'm good there. Just the amount of mail is
insane. I came in this morning at there's over 10,000 in the IMS Queue. I
guess eventually it will slow down...

Thanks to all.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 25, 2003 5:28 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


For #3, what you are seeing is spammer trying to find valid addresses
@dfg.com by simply guessing addresses and trying them, your best bet would
be to turn off the notification on your IMS for E-mail address could not be
found.  For #2, yes they will sit in the queue until they are delivered or
just time out.  For #1, are you sure you're not an open relay?  See
http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
change_Server_55.html.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, June 25, 2003 5:00 PM
Subject: RE: Not Open Relay, but...


 Hi John,

 Is this in response to my question #3? If so, does everyone receive
 over 2000 messages every hour in the 'Admin' mailbox with a subject 
 line of
 'Notification: Inbound Mail Failure? I understand getting some but
 over 2000 an hour? Each of these messages is addressed to 
 [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
 domain name @dfg.com
and
 there's just a ton of them. Thanks for any ideas, all.

 Cheers,
 Tony

 -Original Message-
 From: John Strongosky [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:46 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 NDR's (non-delivery reports) from spammer's probably.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 3:23 PM
 To: Exchange Discussions
 Subject: Not Open Relay, but...


 Hello,

 NT 4 SP6a and Exchange 5.5 SP4. Domain in question is DFG.com

 I've just taken over a site's Exchange server and have noticed
 something strange. It's been sometime since I had to play with 
 Exchange this deep
but
 the Queues on my IMS keep filling up with 1000's of emails. We're not
 an Open Relay that I can tell (I've tested) but there's just a ton of
'Outbound
 Message Awaiting Delivery' with originator  and Destination Host of
 different .com's. There is a ton of Inbound Mail Failures in the 
 'Admin' mailbox for delivery failures as well. My three questions are:

 1) Are these messages that are trying to relay but failing?

 2) If so, are they just going to sit 

Re: Not Open Relay, but...

2003-06-26 Thread Dave Mills
Your mail system is accepting a mail for an invalid address (i.e.
[EMAIL PROTECTED]), and since it couldn't deliver it it's trying to send a
message back to the sender telling them it couldn't deliver the message.
But in this case, the spammer forged the sender address, so your mail server
is sending you NDRs because it can't send the original NDR back to the
spoofed address.  Make sense?  There's not much you can do with Exchange 5.5
to avoid this situation unless the spammer is using a single IP address that
you can block from being able to send mail into your system.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 4:26 PM
Subject: RE: Not Open Relay, but...


 Thanks. I've also cut down the Notifications to just 'Host not Found'.

 One of the NDR's looks like this

 
 A mail message could not be sent because the following host is unknown:

 smdv231.entertainmentmail.net
 The message that caused this notification was:


   To:   [EMAIL PROTECTED]
   From: 
   Subject:  Undeliverable: Sales manager or Marketing dept
 -

 Is this is a Relay, shouldn't I not be accepting it in the first place?

 Thanks for all the insight so far...

 Cheers,
 Tony



 -Original Message-
 From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:30 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 They're just using dfg.com.  Don't bother your MX record.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:37 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000
 messages sitting in the IMS queue after 8hrs? I have another site where
the
 IMS has hardly any messages sitting in there so this is why I am
concerned.
 What if I changed the MX record's IP address, would that help slow it down
a
 little or are they just using dfg.com?

 Cheers,
 Tony

 -Original Message-
 From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 10:10 AM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 Tony,

 Open up the properties page of your IMS Connection, go to the Internet
Mail
 tab and click on the Notifications... button.  My guess would be that you
 have the Always send notifications when non-delivery reports are
generated
 radio button clicked.  If that is the case, select the second choice and
 uncheck the options that you don't want.

 I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers trying
to
 brute force their spam through the system.  I track the NDRs to create a
 spreadsheet for management, showing them the exponential growth of spam
and
 the load it is placing on the servers, in order to justify new servers.

 Jim

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 9:58 AM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 I've tested via telnet and from home using Outlook Express and it always
 replies with 550 so I think I'm good there. Just the amount of mail is
 insane. I came in this morning at there's over 10,000 in the IMS Queue. I
 guess eventually it will slow down...

 Thanks to all.

 Cheers,
 Tony

 -Original Message-
 From: Dave Mills [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 5:28 PM
 To: Exchange Discussions
 Subject: Re: Not Open Relay, but...


 For #3, what you are seeing is spammer trying to find valid addresses
 @dfg.com by simply guessing addresses and trying them, your best bet would
 be to turn off the notification on your IMS for E-mail address could not
be
 found.  For #2, yes they will sit in the queue until they are delivered
or
 just time out.  For #1, are you sure you're not an open relay?  See

http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
 change_Server_55.html.

 - Dave

 - Original Message - 
 From: Woods, Tony [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 5:00 PM
 Subject: RE: Not Open Relay, but...


  Hi John,
 
  Is this in response to my question #3? If so, does everyone receive
  over 2000 messages every hour in the 'Admin' mailbox with a subject
  line of
  'Notification: Inbound Mail Failure? I understand getting some but
  over 2000 an hour? Each of these messages is addressed to
  [EMAIL PROTECTED] or whatever. It's just random letters in front of the
  domain name @dfg.com
 and
  there's just a ton of them. Thanks for any ideas, all.
 
  Cheers,
  Tony
 
  -Original Message-
  From: John Strongosky [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, June 25, 2003 3:46 PM
  To: Exchange Discussions
  Subject: RE: Not Open Relay, but...
 
 
  NDR's (non-delivery reports) from spammer's probably.
 
  

RE: Not Open Relay, but...

2003-06-26 Thread Woods, Tony
Thanks, Dave. That's crystal clear.

Cheers,
Tony

-Original Message-
From: Dave Mills [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 4:02 PM
To: Exchange Discussions
Subject: Re: Not Open Relay, but...


Your mail system is accepting a mail for an invalid address (i.e.
[EMAIL PROTECTED]), and since it couldn't deliver it it's trying to send a
message back to the sender telling them it couldn't deliver the message. But
in this case, the spammer forged the sender address, so your mail server is
sending you NDRs because it can't send the original NDR back to the spoofed
address.  Make sense?  There's not much you can do with Exchange 5.5 to
avoid this situation unless the spammer is using a single IP address that
you can block from being able to send mail into your system.

- Dave

- Original Message - 
From: Woods, Tony [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 4:26 PM
Subject: RE: Not Open Relay, but...


 Thanks. I've also cut down the Notifications to just 'Host not Found'.

 One of the NDR's looks like this

 
 A mail message could not be sent because the following host is 
 unknown:

 smdv231.entertainmentmail.net
 The message that caused this notification was:


   To:   [EMAIL PROTECTED]
   From: 
   Subject:  Undeliverable: Sales manager or Marketing dept
 -

 Is this is a Relay, shouldn't I not be accepting it in the first 
 place?

 Thanks for all the insight so far...

 Cheers,
 Tony



 -Original Message-
 From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:30 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 They're just using dfg.com.  Don't bother your MX record.

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 1:37 PM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 Thanks, Jim. Just so I'm clear, it's not uncommon to have over 10,000 
 messages sitting in the IMS queue after 8hrs? I have another site 
 where
the
 IMS has hardly any messages sitting in there so this is why I am
concerned.
 What if I changed the MX record's IP address, would that help slow it 
 down
a
 little or are they just using dfg.com?

 Cheers,
 Tony

 -Original Message-
 From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 10:10 AM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 Tony,

 Open up the properties page of your IMS Connection, go to the Internet
Mail
 tab and click on the Notifications... button.  My guess would be that 
 you have the Always send notifications when non-delivery reports are
generated
 radio button clicked.  If that is the case, select the second choice 
 and uncheck the options that you don't want.

 I receive anywhere from 3,000 to 10,000 ndrs a day, from spammers 
 trying
to
 brute force their spam through the system.  I track the NDRs to create 
 a spreadsheet for management, showing them the exponential growth of 
 spam
and
 the load it is placing on the servers, in order to justify new 
 servers.

 Jim

 -Original Message-
 From: Woods, Tony [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 26, 2003 9:58 AM
 To: Exchange Discussions
 Subject: RE: Not Open Relay, but...


 I've tested via telnet and from home using Outlook Express and it 
 always replies with 550 so I think I'm good there. Just the amount of 
 mail is insane. I came in this morning at there's over 10,000 in the 
 IMS Queue. I guess eventually it will slow down...

 Thanks to all.

 Cheers,
 Tony

 -Original Message-
 From: Dave Mills [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 5:28 PM
 To: Exchange Discussions
 Subject: Re: Not Open Relay, but...


 For #3, what you are seeing is spammer trying to find valid addresses 
 @dfg.com by simply guessing addresses and trying them, your best bet 
 would be to turn off the notification on your IMS for E-mail address 
 could not
be
 found.  For #2, yes they will sit in the queue until they are 
 delivered
or
 just time out.  For #1, are you sure you're not an open relay?  See

http://www.msexchange.org/tutorials/Preventing_Third_Party_Relaying_In_MS_Ex
 change_Server_55.html.

 - Dave

 - Original Message -
 From: Woods, Tony [EMAIL PROTECTED]
 To: Exchange Discussions [EMAIL PROTECTED]
 Sent: Wednesday, June 25, 2003 5:00 PM
 Subject: RE: Not Open Relay, but...


  Hi John,
 
  Is this in response to my question #3? If so, does everyone receive 
  over 2000 messages every hour in the 'Admin' mailbox with a subject 
  line of
  'Notification: Inbound Mail Failure? I understand getting some but 
  over 2000 an hour? Each of these messages is addressed to 
  [EMAIL PROTECTED] or whatever. It's just random letters in front of the 
  domain name @dfg.com
 and
  there's just a ton of them. Thanks for any ideas, all.
 
  Cheers,
  Tony

Black List Recommendation

2003-06-26 Thread Greg Marr
Hi

Am currently evaluating GFIs MailEssentials anti-spam product and would like to try 
the Black List functionality.  Does anyone have a recommendation for a good black 
list???
 
Thanks in advance

Greg
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Re: Black List Recommendation

2003-06-26 Thread Ludwig
We use Spamcop as primary and NJABL as secondary. The most agile and accurate is 
Spamcop and you can expect to get rid
of 90+% of Spam using that list.

/Luis

On 27 Jun 2003 at 12:03, Greg Marr wrote:

 Hi

 Am currently evaluating GFIs MailEssentials anti-spam product and would like
 to try the Black List functionality.  Does anyone have a recommendation for
 a good black list???   Thanks in advance

 Greg



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


Exchange 2003 with Exchange 2000

2003-06-26 Thread Mike Carlson
Is there a howto or white paper on setting up an Exchange 2003 as a second
server to an Exchange 2000 server? I was hoping to set it up and move a
couple mailboxes over to it to start playing with it.

Any gotchas or look out fors that I should know about?

Thanks,
Mike


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Exchange 2003 with Exchange 2000

2003-06-26 Thread Slinger, Gary
I was hoping to set it up and move a couple mailboxes over to it to start
playing with it.

Uh huh... Yeah.  We ordinarily call that a lab. 

-Original Message-
From: Mike Carlson [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 26, 2003 10:59 PM
To: Exchange Discussions
Subject: Exchange 2003 with Exchange 2000

Is there a howto or white paper on setting up an Exchange 2003 as a second
server to an Exchange 2000 server? I was hoping to set it up and move a
couple mailboxes over to it to start playing with it.

Any gotchas or look out fors that I should know about?

Thanks,
Mike


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]