Solved

Exchange Server under spam and phishing attack

Posted on 2006-11-20
4
299 Views
Last Modified: 2010-03-06
Hi All,

My exchange server is under spam and phishing attack. We have a firewall unit but that does not support spam filtering.
Since 2 weeks thousands of emails are coming in and out from the exchange server which is not legitimate. I am using Exchange 2003 Enterprise server with SP2 and IMF turned on with settings 7/6.
Can you somebody tells me few tips that how can I protect my server from these attacks. All these emails are eating up all my Internet bandwidth and all users are getting emails undelivered which they never sent.

If you need any other information let me know.

Thanks

Maninder

0
Comment
Question by:parpak
4 Comments
 
LVL 16

Expert Comment

by:poweruser32
ID: 17979380
you need to get spam software installed on a dedicated machine (gfi have a 30  day free trial on www.gfi.com) installed  ( a desktop would do) to filter the incoming email
also i would enable recipient filtering on the ex server as this stops email being sent to users who do not exist in AD
is your ex server secured for relay?
0
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 17979543
You need to get the server cleaned up first.
Take a look at my spam cleanup article: http://www.amset.info/exchange/spam-cleanup.asp

I would suggest that you close port 25 on the firewall first to stop the message flow. Then see whether you are an open relay or one of your accounts has been compromised. You should probably change your administrator password.

Simon.
0

Featured Post

Wish Marketing would stop bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now