Exchange Virus?

[timzim]

Interesting that you're on LGfL as we are too. We've been getting vast amounts (i.e. between 4000-5000) of emails daily attempting to use our SMTP as a relay. I contacted Synetrix about this and they said they could do nothing about it. In the end I stuck McAfee's Web Shield on our firewall (ISA Server) to intercept it - basically another SMTP server but on the firewall itself. This detects attempted relay mail and junks it. A fairly old program but it works. I'm sure there are better options but this works and the junk never reaches the mail server.

If you want Synetrix to add a DNS record for you to their DNS servers it'll cost you plenty.

[arthur231283]

As a test can you forward the original message to [email protected] and also send as an attachment item via Outlook so I can do some tests?

 

E-mail sent

 

Thanks

[sukh]

Hi

 

@Arthur - I've done some tests and just to give you high level info, the AS service which we are are using instantly blocks the email. So the email doesn't even hit our gateways. I don't happen to have a USB with me today, but I will test within the Exch Org and let you know the results if you're still interested. The link in the content is obvious spam therefore it was blocked even before entering the Exch Org. I suppose it will come down to the products/service you are using.

 

Does your license cover you for MSFT FPE 2010?

 

Sukh

[arthur231283]

Does your license cover you for MSFT FPE 2010?

 

I will have a look into this today but I would assume so, we have the Microsoft Schools agreement so are covered for most products.

 

I really appreciate you looking into this for me

 

Arthur

[sukh]

Hi

 

@Arthur - If you deploy FPE then this will be picked up. However, you should really scan your emails for AS before emails enter your Org, maybe at the gateway or better still in the cloud. This may be a little costly but you may get an educational discount, for example, if you use MSFT EHS. I very much doubt Symantec will offer the cloud hygene at discounted rate but I'd call them and ask.

 

Sukh