Exchange Server Forums

GFI Directory Harvesting High

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> GFI Directory Harvesting High

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

GFI Directory Harvesting High - 27.Sep.2005 1:05:31 PM

zodiaczz

Posts: 118
Joined: 27.Nov.2004
From: canada
Status: offline

Hello,

WE just installed GFI on your exchange 2000 server. Right now we just have the program tagging SPAM just to give us an idea on what it is finding. Under the daily spam reports we notice that the Directory Harvesting SPAM is extremely high, we have 100 users. The directory harvesting is averaging about 12000 SPAM emails a day?
This seems insanely high, according to our reports spam makes up 99% of the incoming mail.

Does this seem normal? I been on a couple other sites with GFI and have noticed the Directory harvesting around 300 to 400. IF I do have this much coming in, is there a way I can clean this high amount up.

Thoughts Suggestions?

Thanks

Post #: 1

Featured Links*

RE: GFI Directory Harvesting High - 4.Oct.2005 1:43:54 AM

dlwest65

Posts: 4
Joined: 3.Oct.2005
Status: offline

I get huge amounts of "Directory Harvest"-type spams, mainly bounce messages from other servers caused by spammers sending out messages with "From" addresses with fictitious accounts on one of my domains. 99% is pretty bad, though. I'd try setting GFI to save the Directory Harvest emails to a folder and inspecting them to see if there is any obvious pattern.

I use GFI, but ended up making it my secondary level of defense. It sits behind another SMTP server that uses another product to screen out the worst crap before passing it on to the GFI-equipped server. Happy to provide details if you're curious.

(in reply to zodiaczz)