Solved

Directory Harvest Attack - Postini

Posted on 2006-11-02
6
1,174 Views
Last Modified: 2012-08-14
Hello

I have Postini spam filtering, and I just got an alert about a Directory Harvest Attack, along with offending IP address. What should I do, if anything? I have Exchange 2003 running on Windows 2003 Server.

thanks in advance.
0
Comment
Question by:Trevor Local
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 250 total points
ID: 17865905
Unless you know the IP address (it is a competitor) then there is very little you can do. Dealing with directory harvest attacks is one of the things that you pay Postini to do. Have you asked Postini what you should do?

Simon.
0
 
LVL 3

Assisted Solution

by:mario_andres
mario_andres earned 250 total points
ID: 17867273
Postini, is very good service, outr company uses it as well.  The Welcome Emails that was sent to you have lots of good info on how to proctec your Exchange servers.  Also Please make sure your firewall has an access list  toOnly takes email from Postini.

Mario
0
 

Author Comment

by:Trevor Local
ID: 17868218
so if I got a notice from Postini- that means they caught it?
got another one a couple hours ago too. I do believe my firewall is set up to only accept mail from Postini, I will double check.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 104

Expert Comment

by:Sembee
ID: 17868327
if you getting the emails from Postini, then they are catching them. What is the point in notifying you though?

Simon.
0
 
LVL 3

Expert Comment

by:mario_andres
ID: 17869380
This is just good practice to only allow postini access to yoru Emails server (smtp Server).  Postini will qarantine virus and spam. So do not worry.  
0
 

Author Comment

by:Trevor Local
ID: 17877005
well I've gotten 4 in the past couple days, haven't had one for a year and a half since using Postini.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question