• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Logging suspicious events

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Logging suspicious events Page: [1]
Login
Message << Older Topic   Newer Topic >>
Logging suspicious events - 23.May2003 2:17:00 PM   
Assist_IT

 

Posts: 1
Joined: 23.May2003
From: Australia
Status: offline
Under Exchange 5.5 there was a great feature that logged "relaying denied" errors to the Event Logs.

I would like to have the same for Exchange 2000. I have turned the SMTP logging on to a file and increased the Diagnostics logging for SMTP but still don't get a similar message in the eveng log.

I can tell there are attemtps from .TW IP addresses (where else of course) from the SMTP log files but was hoping to have something similar to Exchange 5.5 to show up in the Event Log so the customer can also read easily.

Would also like to know peoples thoughts on the best way to log events specifcially for mail relaying.

Thanks in Advance for any assistance
Post #: 1
RE: Logging suspicious events - 29.May2003 4:04:00 PM   
DaDougInc

 

Posts: 845
Joined: 17.May2002
From: NC
Status: offline
Try diagnostic logging on the server - SMTP Protocol Log. Set this to MAX.

Not sure if this it but its worth a shot.

(in reply to Assist_IT)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Logging suspicious events Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter