- Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
- Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!
Reply to: Spam Bots
Collapse
You are not logged in or you do not have permission to access this page. This could be due to one of several reasons:
- You are not logged in. If you are already registered, fill in the form below to log in, or follow the "Sign Up" link to register a new account.
- You may not have sufficient privileges to access this page. Are you trying to edit someone else's post, access administrative features or some other privileged system?
- If you are trying to post, the administrator may have disabled your account, or it may be awaiting activation.
Logging in...
Previously on "Spam Bots"
Collapse
-
Is your Exchange server external facing, or do you have another host/service inbetween that and the internet?
As mentioned it is worth checking your relay settings on the Frontend servers, to ensure that the server is not acting as an open relay.
Leave a comment:
-
Originally posted by KyajaeGuys,
Has anyone any experience of Spam Bots sending cr@p out from a network via Exchange Server. This isn't a 'for sure' problem I'm looking into but I've got some strange emails heading out in the form of [garbled-mix of alphanumenrics]@our-domain-name.co.uk which looks like the classic generated spam we all come across.
Does anyone know of any software we can deploy to determine if we have a hijacked PC/Server?
Thanks.
When you say you have strange emails heading out where are you seing them? Are they being bounced as undeliverable or can you see them in the mail transaction logs?
It's probably not the server that has the problem but a compromised PC on the network. Check the mail server log for traffic and see if there is a culprit. If you arn't logging traffic atm start and see what turns up.
Do the destination addresses have a pattern? Are they all sent from the same "from" address?
If this fails run a sniffer like windump/tcpdump and look for traffic on port 25, might give you the IP off the offending box including traffic coming from outside and being bounced off your mail server.
Leave a comment:
-
Spam Bots
Guys,
Has anyone any experience of Spam Bots sending cr@p out from a network via Exchange Server. This isn't a 'for sure' problem I'm looking into but I've got some strange emails heading out in the form of [garbled-mix of alphanumenrics]@our-domain-name.co.uk which looks like the classic generated spam we all come across.
Does anyone know of any software we can deploy to determine if we have a hijacked PC/Server?
Thanks.Tags: None
- Home
- News & Features
- First Timers
- IR35 / S660 / BN66
- Employee Benefit Trusts
- Agency Workers Regulations
- MSC Legislation
- Limited Companies
- Dividends
- Umbrella Company
- VAT / Flat Rate VAT
- Job News & Guides
- Money News & Guides
- Guide to Contracts
- Successful Contracting
- Contracting Overseas
- Contractor Calculators
- MVL
- Contractor Expenses
Advertisers
Contractor Services
CUK News
- Streamline Your Retirement with iSIPP: A Solution for Contractor Pensions Sep 1 09:13
- Making the most of pension lump sums: overview for contractors Sep 1 08:36
- Umbrella company tribunal cases are opening up; are your wages subject to unlawful deductions, too? Aug 31 08:38
- Contractors, relabelling 'labour' as 'services' to appear 'fully contracted out' won't dupe IR35 inspectors Aug 31 08:30
- How often does HMRC check tax returns? Aug 30 08:27
- Work-life balance as an IT contractor: 5 top tips from a tech recruiter Aug 30 08:20
- Autumn Statement 2023 tipped to prioritise mental health, in a boost for UK workplaces Aug 29 08:33
- Final reminder for contractors to respond to the umbrella consultation (closing today) Aug 29 08:09
- Top 5 most in demand cyber security contract roles Aug 25 08:38
- Changes to the right to request flexible working are incoming, but how will contractors be affected? Aug 24 08:25
Leave a comment: