You have a BE and a FE server? Since the FE would be the machine communicating with the sending host, that would be the machine on which to block the connecting IP.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of April Fleming > Posted At: Monday, November 22, 2004 1:31 PM > Posted To: swynk > Conversation: Can't block the email address > Subject: RE: Can't block the email address > > > Blocked the ip on back-end exch server but it is still > getting through!!! > > How is it possible that it is still getting through!? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of April Fleming > Sent: Monday, November 22, 2004 2:25 PM > To: Exchange Discussions > Subject: RE: Can't block the email address > > > I did go ahead and add that ip to the domains that I am > blocking, but it is still getting through. Not sure if you > can add a straight IP, don't know if there is anywhere else > to add it. I will also try to add on the backend exch server. > > Thanks. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Derek Harris > Sent: Monday, November 22, 2004 2:26 PM > To: Exchange Discussions > Subject: RE: Can't block the email address > > > Earthlink & eallinone have nothing to do with the source of > this SPAM. The ip address is what you need to block: 216.20.252.84. > > OrgName: Transtel > OrgID: TRAT > Address: 324 South State Street > City: Salt Lake City > StateProv: UT > PostalCode: 84111 > Country: US > > NetRange: 216.20.224.0 - 216.20.255.255 > CIDR: 216.20.224.0/19 > NetName: TRANSTEL-1BLK > NetHandle: NET-216-20-224-0-1 > Parent: NET-216-0-0-0-0 > NetType: Direct Allocation > NameServer: NS4.EXPRESSTEL.NET > NameServer: NS5.EXPRESSTEL.NET > Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE > RegDate: 2000-06-20 > Updated: 2003-05-20 > > TechHandle: JZ135-ARIN > TechName: Zatorski, John > TechPhone: +1-800-748-6200 > TechEmail: [EMAIL PROTECTED] > > OrgTechHandle: JZ135-ARIN > OrgTechName: Zatorski, John > OrgTechPhone: +1-800-748-6200 > OrgTechEmail: [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of April Fleming > Sent: Monday, November 22, 2004 12:04 PM > To: Exchange Discussions > Subject: Can't block the email address > > I have an email account which is being spammed by another > email account, it is sending the account on our server > messages non-stop since last week. > > I tried to block both earthlink.net and eallinone.com from > our front-end MailEnable gateway but we are still getting > them. The most disconcerting thing is the from: [EMAIL PROTECTED] > > Here are the headers > > Received: from DixonTiconderoga.com (Dixon.124.215.209.in-addr.arpa > [209.215.124.3]) by exch2.dixonticonderoga.com with SMTP > (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) > id XNKKZ9CZ; Mon, 22 Nov 2004 13:29:03 -0500 > Received: from mail.eallinone.com ([216.20.252.84]) by > DixonTiconderoga.com with MailEnable ESMTP; Mon, 22 Nov 2004 > 13:32:56 -0500 > Received: (from [EMAIL PROTECTED]) > by mail.eallinone.com (8.11.6/8.11.6) id iAMI56C24774; > Mon, 22 Nov 2004 10:05:06 -0800 > Date: Mon, 22 Nov 2004 10:05:06 -0800 > Received: from smtpauth06.mail.atl.earthlink.net > (smtpauth06.mail.atl.earthlink.net [209.86.89.66]) > by mail.eallinone.com (8.11.6/8.11.6) with ESMTP id iAJHefk07427 > for <[EMAIL PROTECTED]>; Fri, 19 Nov 2004 09:40:41 -0800 > Received: from [69.34.8.245] (helo=earthlink.net) > by smtpauth06.mail.atl.earthlink.net with asmtp (Exim 4.34) > id 1CVCXv-00083I-9x; Fri, 19 Nov 2004 12:27:44 -0500 > Message-ID: <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > X-Mailer: EarthLink MailBox 2005.1.57.0 (Windows) > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > April Fleming > Information Services > Dixon Ticonderoga Company > 407-829-9000 ext. 153 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
