users makes me wonder if your email server is acting as a relay. To =
clarify, are these emails outgoing or incoming? If they are incoming, =
then the post regarding blocking all ports outside of 25 is your best =
solution. However, if the emails are outgoing, then you may have the =
option checked that allows your Exchange server to act as a relay. We use =
Groupwise, and I believe, by default, our email server was relaying other =
people's emails. ...and there were lots of emails being sent.
=20
Good luck.
=20
Heather Drews
Software Analyst
Little Falls Community Schools, MN
(320) 616-2250
>>> Ann Hamel <ahamel@fvs.edu> 2/21/2008 4:49 PM >>>
While I have been interested in the terrific philosophical discussions
that have been bouncing around this group - reality pulls me back and I
have a call for help.
For some time now, we have had a problem with self-sending spam. I can
only identify the header on the email as:=20
communications_msn_cs_enus@cimail15.msn.com=20
<20040601144457.3498.qmail@user-0f98c88342
Which means nothing to me. Is there anyone out there who can point me
in the right direction to stop this attack? We are constantly being
blocked as abusive users now and the frustration level is rising...
To run our email we use Windows Server 2003, MS Exchange, Sonicwall
firewall (with port 25 blocked except for the email server), and a tired
tech staff.
Ann Hamel
Director of Technology
Fountain Valley School of Colorado
6155 Fountain Valley School Road
Colorado Springs, CO 80911
719-391-5330
ahamel@fvs.edu=20
We are continually faced with a series of great opportunities
brilliantly disguised as insoluble problems. (John Gardner)
[ For info on ISED-L see http://www.gds.org/ISED-L ]
Submissions to ISED-L are released under a creative commons, attribution, =
non-commercial, share-alike license.
RSS Feed, http://listserv.syr.edu/scripts/wa.exe?RSS&L=3DISED-L
[ For info on ISED-L see http://www.gds.org/ISED-L ]
Submissions to ISED-L are released under a creative commons, attribution, non-commercial, share-alike license.
RSS Feed, http://listserv.syr.edu/scripts/wa.exe?RSS&L=3DISED-L
