Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Directory Harvest Attack - Postini

Posted on 2006-11-02
6
Medium Priority
?
1,177 Views
Last Modified: 2012-08-14
Hello

I have Postini spam filtering, and I just got an alert about a Directory Harvest Attack, along with offending IP address. What should I do, if anything? I have Exchange 2003 running on Windows 2003 Server.

thanks in advance.
0
Comment
Question by:Trevor Local
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 1000 total points
ID: 17865905
Unless you know the IP address (it is a competitor) then there is very little you can do. Dealing with directory harvest attacks is one of the things that you pay Postini to do. Have you asked Postini what you should do?

Simon.
0
 
LVL 3

Assisted Solution

by:mario_andres
mario_andres earned 1000 total points
ID: 17867273
Postini, is very good service, outr company uses it as well.  The Welcome Emails that was sent to you have lots of good info on how to proctec your Exchange servers.  Also Please make sure your firewall has an access list  toOnly takes email from Postini.

Mario
0
 

Author Comment

by:Trevor Local
ID: 17868218
so if I got a notice from Postini- that means they caught it?
got another one a couple hours ago too. I do believe my firewall is set up to only accept mail from Postini, I will double check.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 104

Expert Comment

by:Sembee
ID: 17868327
if you getting the emails from Postini, then they are catching them. What is the point in notifying you though?

Simon.
0
 
LVL 3

Expert Comment

by:mario_andres
ID: 17869380
This is just good practice to only allow postini access to yoru Emails server (smtp Server).  Postini will qarantine virus and spam. So do not worry.  
0
 

Author Comment

by:Trevor Local
ID: 17877005
well I've gotten 4 in the past couple days, haven't had one for a year and a half since using Postini.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
The core idea of this article is to make you acquainted with the best way in which you can export Exchange mailbox to PST format.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question