How are you trying to block it? I've used outlook rules on the client as a stop gap measure until I have these types of problems straightened out.
Josh -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of April Fleming Sent: Monday, November 22, 2004 2:31 PM To: Exchange Discussions Subject: RE: Can't block the email address Blocked the ip on back-end exch server but it is still getting through!!! How is it possible that it is still getting through!? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of April Fleming Sent: Monday, November 22, 2004 2:25 PM To: Exchange Discussions Subject: RE: Can't block the email address I did go ahead and add that ip to the domains that I am blocking, but it is still getting through. Not sure if you can add a straight IP, don't know if there is anywhere else to add it. I will also try to add on the backend exch server. Thanks. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Derek Harris Sent: Monday, November 22, 2004 2:26 PM To: Exchange Discussions Subject: RE: Can't block the email address Earthlink & eallinone have nothing to do with the source of this SPAM. The ip address is what you need to block: 216.20.252.84. OrgName: Transtel OrgID: TRAT Address: 324 South State Street City: Salt Lake City StateProv: UT PostalCode: 84111 Country: US NetRange: 216.20.224.0 - 216.20.255.255 CIDR: 216.20.224.0/19 NetName: TRANSTEL-1BLK NetHandle: NET-216-20-224-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS4.EXPRESSTEL.NET NameServer: NS5.EXPRESSTEL.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2000-06-20 Updated: 2003-05-20 TechHandle: JZ135-ARIN TechName: Zatorski, John TechPhone: +1-800-748-6200 TechEmail: [EMAIL PROTECTED] OrgTechHandle: JZ135-ARIN OrgTechName: Zatorski, John OrgTechPhone: +1-800-748-6200 OrgTechEmail: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of April Fleming Sent: Monday, November 22, 2004 12:04 PM To: Exchange Discussions Subject: Can't block the email address I have an email account which is being spammed by another email account, it is sending the account on our server messages non-stop since last week. I tried to block both earthlink.net and eallinone.com from our front-end MailEnable gateway but we are still getting them. The most disconcerting thing is the from: [EMAIL PROTECTED] Here are the headers Received: from DixonTiconderoga.com (Dixon.124.215.209.in-addr.arpa [209.215.124.3]) by exch2.dixonticonderoga.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) id XNKKZ9CZ; Mon, 22 Nov 2004 13:29:03 -0500 Received: from mail.eallinone.com ([216.20.252.84]) by DixonTiconderoga.com with MailEnable ESMTP; Mon, 22 Nov 2004 13:32:56 -0500 Received: (from [EMAIL PROTECTED]) by mail.eallinone.com (8.11.6/8.11.6) id iAMI56C24774; Mon, 22 Nov 2004 10:05:06 -0800 Date: Mon, 22 Nov 2004 10:05:06 -0800 Received: from smtpauth06.mail.atl.earthlink.net (smtpauth06.mail.atl.earthlink.net [209.86.89.66]) by mail.eallinone.com (8.11.6/8.11.6) with ESMTP id iAJHefk07427 for <[EMAIL PROTECTED]>; Fri, 19 Nov 2004 09:40:41 -0800 Received: from [69.34.8.245] (helo=earthlink.net) by smtpauth06.mail.atl.earthlink.net with asmtp (Exim 4.34) id 1CVCXv-00083I-9x; Fri, 19 Nov 2004 12:27:44 -0500 Message-ID: <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] X-Mailer: EarthLink MailBox 2005.1.57.0 (Windows) From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> April Fleming Information Services Dixon Ticonderoga Company 407-829-9000 ext. 153 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
