This is true of a default install of Exchange Server; however, with Exchange
200x using the IIS SMTP Server there is access to the SMTP conversation
allowing messages to be killed at HELO or conversation terminated based on
RCPT TO if you wanted.  This requires C++, not VB or VBScript and I believe
is outlined in the Windows or Exchange SDK.  You can also have it accept and
not reject.

William

 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad
Sent: Wednesday, July 02, 2003 3:11 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Anti Spam issues in Imail 8


>As a first attempt we moved the domain for an hour or 2 to test it on 
>the server running Imail
>8 and then moved it back to Exchange as we ran into a few problems.

Exchange as MX is much worse than Imail in a dictionary attack since
Exchange accepts ALL mail for all Exchange domains, even if the user is
unknown. ie, Exchange, apparently (to be confirmed by an Exchange expert,
but I've seen this reported several times) does not do any rejects at
envelope level (after RCPT TO command).  So all mail is received and then
rejected.  This is the worst possible behavior in a dictionary attack.

Obvoiusly, Exchange is unsuitable as a public Internet mail server (same of
W2K DNS), except in "best case" Garden of Eden conditions.  And we will
probably never again have "best case" mail situation (no spam) on Internet.

Len


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to