OT- interesting morning with SMTP connections

There's absolutely nothing you can do about this. There's no one to call to complain to. If you have a public Internet connection you're going to get poked and prodded constantly.

Invest in a firewall/filtering product you like and trust and move on. Depending on your needs and number of users, you can get these for <$500.00.

www.barracudanetworks.com
www.gfisoftware.com
www.sonicwall.com

-bws

--
Brian W. Spolarich ~ Manager, Information Services ~ Advanced Photonix / Picometrix
    bspolarich@... ~ 734-864-5618 ~ www.advancedphotonix.com


-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of Darren Mann
Sent: Wednesday, May 06, 2009 12:56 PM
To: vantage@yahoogroups.com
Subject: [Vantage] OT- interesting morning with SMTP connections

I am running a 2003 SBS server with Exchange 2003. I have been watching
the connections under the SMTP virtual server. It's amazing how much it
is being hit by computers all over the world. Maybe 1 in 30 are US
based. I would write down the IP and do a trace. Once I determined
them not to be customers of ours I blocked them in the access settings
for that connector. I've gotten no spam during the time I was doing
this. But every 2-3 seconds another connects to the server. It's no
wonder they can't get a grip on the spam running around the net when so
much of it is based in third world countries. China, Amsterdam, Brazil,
India, Mexico, Russia...the list goes on and on. I've tried to block as
many as I can but I know they have some way around this. Would changing
my static IP throw them off our path for a while?

On a related note: I was looking at event viewer logs and saw an alert
that a certain IP had did a all ports scan. I traced those IP's to Ebay
and Microsoft. Why would they be scanning our server ports?

Darren Mann
IT Manager
Miller Products Co.
1015 N. Main St.
Osceola, IA 50213
Ph. 641-342-2103
Fax 641-342-3222



[Non-text portions of this message have been removed]



------------------------------------

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
I am running a 2003 SBS server with Exchange 2003. I have been watching
the connections under the SMTP virtual server. It's amazing how much it
is being hit by computers all over the world. Maybe 1 in 30 are US
based. I would write down the IP and do a trace. Once I determined
them not to be customers of ours I blocked them in the access settings
for that connector. I've gotten no spam during the time I was doing
this. But every 2-3 seconds another connects to the server. It's no
wonder they can't get a grip on the spam running around the net when so
much of it is based in third world countries. China, Amsterdam, Brazil,
India, Mexico, Russia...the list goes on and on. I've tried to block as
many as I can but I know they have some way around this. Would changing
my static IP throw them off our path for a while?

On a related note: I was looking at event viewer logs and saw an alert
that a certain IP had did a all ports scan. I traced those IP's to Ebay
and Microsoft. Why would they be scanning our server ports?

Darren Mann
IT Manager
Miller Products Co.
1015 N. Main St.
Osceola, IA 50213
Ph. 641-342-2103
Fax 641-342-3222



[Non-text portions of this message have been removed]