Right, and I tried that but it was still getting though, how it is getting through is utterly baffling to me, other than the fact that it is MailEnable standard and could be just one more feature that does not work.
I blocked the email with a rule, which "worked" in that the user does not have to deal with them, but am still at a loss as to a real solution. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Scharff Sent: Monday, November 22, 2004 2:51 PM To: Exchange Discussions Subject: RE: Can't block the email address You have a BE and a FE server? Since the FE would be the machine communicating with the sending host, that would be the machine on which to block the connecting IP. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of April Fleming > Posted At: Monday, November 22, 2004 1:31 PM > Posted To: swynk > Conversation: Can't block the email address > Subject: RE: Can't block the email address > > > Blocked the ip on back-end exch server but it is still > getting through!!! > > How is it possible that it is still getting through!? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of April Fleming > Sent: Monday, November 22, 2004 2:25 PM > To: Exchange Discussions > Subject: RE: Can't block the email address > > > I did go ahead and add that ip to the domains that I am > blocking, but it is still getting through. Not sure if you > can add a straight IP, don't know if there is anywhere else > to add it. I will also try to add on the backend exch server. > > Thanks. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Derek Harris > Sent: Monday, November 22, 2004 2:26 PM > To: Exchange Discussions > Subject: RE: Can't block the email address > > > Earthlink & eallinone have nothing to do with the source of > this SPAM. The ip address is what you need to block: 216.20.252.84. > > OrgName: Transtel > OrgID: TRAT > Address: 324 South State Street > City: Salt Lake City > StateProv: UT > PostalCode: 84111 > Country: US > > NetRange: 216.20.224.0 - 216.20.255.255 > CIDR: 216.20.224.0/19 > NetName: TRANSTEL-1BLK > NetHandle: NET-216-20-224-0-1 > Parent: NET-216-0-0-0-0 > NetType: Direct Allocation > NameServer: NS4.EXPRESSTEL.NET > NameServer: NS5.EXPRESSTEL.NET > Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE > RegDate: 2000-06-20 > Updated: 2003-05-20 > > TechHandle: JZ135-ARIN > TechName: Zatorski, John > TechPhone: +1-800-748-6200 > TechEmail: [EMAIL PROTECTED] > > OrgTechHandle: JZ135-ARIN > OrgTechName: Zatorski, John > OrgTechPhone: +1-800-748-6200 > OrgTechEmail: [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of April Fleming > Sent: Monday, November 22, 2004 12:04 PM > To: Exchange Discussions > Subject: Can't block the email address > > I have an email account which is being spammed by another > email account, it is sending the account on our server > messages non-stop since last week. > > I tried to block both earthlink.net and eallinone.com from > our front-end MailEnable gateway but we are still getting > them. The most disconcerting thing is the from: [EMAIL PROTECTED] > > Here are the headers > > Received: from DixonTiconderoga.com (Dixon.124.215.209.in-addr.arpa > [209.215.124.3]) by exch2.dixonticonderoga.com with SMTP > (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) > id XNKKZ9CZ; Mon, 22 Nov 2004 13:29:03 -0500 > Received: from mail.eallinone.com ([216.20.252.84]) by > DixonTiconderoga.com with MailEnable ESMTP; Mon, 22 Nov 2004 > 13:32:56 -0500 > Received: (from [EMAIL PROTECTED]) > by mail.eallinone.com (8.11.6/8.11.6) id iAMI56C24774; > Mon, 22 Nov 2004 10:05:06 -0800 > Date: Mon, 22 Nov 2004 10:05:06 -0800 > Received: from smtpauth06.mail.atl.earthlink.net > (smtpauth06.mail.atl.earthlink.net [209.86.89.66]) > by mail.eallinone.com (8.11.6/8.11.6) with ESMTP id iAJHefk07427 > for <[EMAIL PROTECTED]>; Fri, 19 Nov 2004 09:40:41 -0800 > Received: from [69.34.8.245] (helo=earthlink.net) > by smtpauth06.mail.atl.earthlink.net with asmtp (Exim 4.34) > id 1CVCXv-00083I-9x; Fri, 19 Nov 2004 12:27:44 -0500 > Message-ID: <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > X-Mailer: EarthLink MailBox 2005.1.57.0 (Windows) > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > April Fleming > Information Services > Dixon Ticonderoga Company > 407-829-9000 ext. 153 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
