Oh how I miss being a network admin at the Girl Scouts...  I had boxes
of cookies stacked from floor to ceiling!


On Tue, Jun 17, 2008 at 10:03 AM, John Hornbuckle
<[EMAIL PROTECTED]> wrote:
> You can send us all some cookies as payment!
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 17, 2008 10:02 AM
> To: MS-Exchange Admin Issues
> Subject: RE: spam listing
>
> List, I apologize for not responding yesterday. We happened to be placed
> on CBL / DNSRBL and one other site that utilized CBL. So after extensive
> researching, I found the malicious user, isolated and removed that user
> from the network. Scanned and requested removal and by 1230 central
> time, we (Girl Scouts) where back in operation.
>
> So thank you all for your comments and suggestions. Yesterday morning
> was just not a good one.
>
>
> Cheers,
>
> Thomas
>
> -----Original Message-----
> From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 17, 2008 8:05 AM
> To: MS-Exchange Admin Issues
> Subject: Re: spam listing
>
> Thomas, if you need/want additional help -  you are going to have to
> post the contents of one of your NDRs.
>
> On Mon, Jun 16, 2008 at 11:40 AM,  <[EMAIL PROTECTED]>
> wrote:
>> So, I arrive this morning, and I see all these emails stating we are
> on a
>> RBL list, I scan the server and run manual scans on all systems and
> cannot
>> find any type of Trojan or bot resing on the network.
>>
>>
>>
>> Our environment is os win 2k3 sp1, exchange 2k3 sp2 and all ws's have
> office
>> 2007, with SAV 10.2 running on the clients and at the server levels
> and the
>> email server has Ninja.
>>
>>
>>
>> I'm not quite sure as to what occurred, except maybe a mass email? And
> some
>> server was pushed a little hard and stated we are a spam site.
>>
>>
>>
>> Is there any other items or places I can look to determine what
> occurred?
>>
>>
>>
>>
>>
>> TIA,
>>
>>
>>
>> Thomas Gonzalez
>>
>> Technology Manager
>>
>> Girl Scouts of Southwest Texas
>>
>> 210.349.2404 phone
>> 210.403.1586 DID
>>
>> 210.349.2666 fax
>>
>> www.girlscouts-swtx.org
>>
>> [EMAIL PROTECTED]
>>
>>
>>
>> This email and any attached files are confidential and intended solely
> for
>> the intended recipient(s). If you are not the named recipient you
> should not
>> read, distribute, copy or alter this email. Any views or opinions
> expressed
>> in this email are those of the author and do not represent those of
> the Girl
>> Scouts of Southwest Texas. Warning: Although precautions have been
> taken to
>> make sure no viruses are present in this email, Girl Scouts of
> Southwest
>> Texas cannot accept responsibility for any loss or damage that arise
> from
>> the use of this email or attachments.
>>
>>
>
>
>
> --
> ME2
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~             http://www.sunbeltsoftware.com/Ninja                ~
>
>
> This email and any attached files are confidential and intended solely
> for the intended recipient(s). If you are not the named recipient you
> should not read, distribute, copy or alter this email. Any views or
> opinions expressed in this email are those of the author and do not
> represent those of the Girl Scouts of Southwest Texas company. Warning:
> Although precautions have been taken to make sure no viruses are present
> in this email, the company cannot accept responsibility for any loss or
> damage that arise from the use of this email or attachments.
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~             http://www.sunbeltsoftware.com/Ninja                ~
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~             http://www.sunbeltsoftware.com/Ninja                ~
>



-- 
ME2

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~             http://www.sunbeltsoftware.com/Ninja                ~

Reply via email to