GFI Directory Harvesting High (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message


zodiaczz -> GFI Directory Harvesting High (27.Sep.2005 1:05:31 PM)

Hello,

WE just installed GFI on your exchange 2000 server.  Right now we just have the program tagging SPAM just to give us an idea on what it is finding.  Under the daily spam reports we notice that the Directory Harvesting SPAM is extremely high, we have 100 users.  The directory harvesting is averaging about 12000 SPAM emails a day?
This seems insanely high, according to our reports spam makes up 99% of the incoming mail.

Does this seem normal? I been on a couple other sites with GFI and have noticed the Directory harvesting around 300 to 400.  IF I do have this much coming in, is there a way I can clean this high amount up.

Thoughts Suggestions?

Thanks




dlwest65 -> RE: GFI Directory Harvesting High (4.Oct.2005 1:43:54 AM)

I get huge amounts of "Directory Harvest"-type spams, mainly bounce messages from other servers caused by spammers sending out messages with "From" addresses with fictitious accounts on one of my domains.  99% is pretty bad, though.  I'd try setting GFI to save the Directory Harvest emails to a folder and inspecting them to see if there is any obvious pattern.

I use GFI, but ended up making it my secondary level of defense.  It sits behind another SMTP server that uses another product to screen out the worst crap before passing it on to the GFI-equipped server.  Happy to provide details if you're curious.




Zelandakh -> RE: GFI Directory Harvesting High (9.Oct.2005 7:09:03 AM)

100 users get 12,000 emails per day? Depending on your company, it could really be spam.

Inspect the logs, talk to the users.




Page: [1]