Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Fri 1/23/2009 1:13 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
And the "really big boys" have many MX records with different weights that
give out different values depending on the source IP addre
Frequently you can consider the secondary to be a spam honeypot.
-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Friday, January 23, 2009 10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
And the "really big boys"
hp
-Original Message-
From: Don Andrews [mailto:don.andr...@safeway.com]
Sent: Friday, January 23, 2009 1:07 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
Not the case here - we have 2 internet feeds at separate
datacenters/carriers - each has a pair of equally weighted
, January 23, 2009 5:57 AM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
> Then I lose my failover to the mail server (direct connect)
> in case the 'cuda goes offline.
The days of the "backup MX" are long gone. And it's really no
loss-think
about it:
Perhaps in your environment it is not required. I can assure you though, that
you are in the minority
-Original Message-
From: Jason Gurtz [mailto:jasongu...@npumail.com]
Sent: Friday, January 23, 2009 9:57 AM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
> The
> Then I lose my failover to the mail server (direct connect)
> in case the 'cuda goes offline.
The days of the "backup MX" are long gone. And it's really no loss-think
about it: if your MX is unavailable, senders will queue mail (typically
for several days) until it comes back online and then r
SMTP virtual server log - may need to turn up the detail on what's recorded.
Also check for login failures in the security event log.
Carl
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 3:46 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a sp
rson.com]
Sent: Wednesday, January 21, 2009 3:12 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
In my experience with the iPhone, they change their IP almost every time
they connect to the cellular network. Also, what's the reason behind
having them connect using SMTP as
Administrator
Ext. 246
From: Carl Houseman [mailto:c.house...@gmail.com]
Sent: Wednesday, January 21, 2009 3:28 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
If you have SMTP relaying enabled for authorized SMTP, then your AD
account passwords are weak
:mich...@theessentialexchange.com]
Sent: Wednesday, January 21, 2009 2:09 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
You only have a single MX record anyway - and that goes to the barracuda.
Regards,
Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/
tacts.
Andrew Greene
IS Technician / Webmaster
City of Anderson
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Wednesday, January 21, 2009 2:52 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
When you put that secondary MX back up the spammers will bypass
ubject: RE: stopping a spammer
Yea, that's where the spam is going, not coming from. I checked one of
the att iphones here and it's IP address belongs to Verizon? The ip
addresses only share the class A portion of 71.
Thanks,
Jake Gardner
TTC Network Adminis
From: Scot Parsons [mailto:spars...@scetv.org]
Sent: Wednesday, January 21, 2009 2:55 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
Yeah. Vtext.com is Verizon texting.
From: David McSpadden [mailto:dav...@imcu.org]
Sent: Wednesday, January 21, 2009 2:50 PM
To: MS-Exch
Yeah. Vtext.com is Verizon texting.
From: David McSpadden [mailto:dav...@imcu.org]
Sent: Wednesday, January 21, 2009 2:50 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
The logs do look like texting or webmail entries from a phone.
From: Jake
The logs do look like texting or webmail entries from a phone.
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 2:47 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
I pulled the extra MX a couple months
When you put that secondary MX back up the spammers will bypass your Cuda.
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 2:47 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
I pulled the extra MX a couple months ago when the cuda came online
e.com]
Sent: Wednesday, January 21, 2009 2:09 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
You only have a single MX record anyway - and that goes to the
barracuda.
Regards,
Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/
ilto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 2:07 PM
To: MS-Exchange Admin Issues
Subject: RE: stopping a spammer
Then I lose my failover to the mail server (direct connect) in case the
'cuda goes offline.
Thanks,
Jake Gardner
TTC Network Administrator
Ext. 246
hange Admin Issues
Subject: RE: stopping a spammer
First thing. Block port 25 incoming and outgoing on the firewall to
everything except the cuda.
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 1:47 PM
To: MS-Exchange Admin Issues
Subject: stopping a spammer
S-Exchange Admin Issues
Subject: RE: stopping a spammer
First thing. Block port 25 incoming and outgoing on the firewall to
everything except the cuda.
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 1:47 PM
To: MS-Exchange Admin Issues
Subject: stopping
First thing. Block port 25 incoming and outgoing on the firewall to
everything except the cuda.
From: Jake Gardner [mailto:jgard...@ttcdas.com]
Sent: Wednesday, January 21, 2009 1:47 PM
To: MS-Exchange Admin Issues
Subject: stopping a spammer
I'm at a loss here and need some help.
I h
21 matches
Mail list logo
