General discussion

Locked

someone trying to access my email server

By MikeLazz ·
I have been checking the logs to my email server and am noticing that someone is trying to access my email server for whatever reason. The error message that I am getting in the application log is

"Logon attempt from xxx.xxx.xxx.xxx to "random name" failed. HrLookupCredentials() call failed with error Logon failure: unknown user name or bad password.

What is the best way to prevent this from occurring? We are running Exchange 5.5 sp4 + all updates following sp4 on NT server sp6a.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to someone trying to access ...

You could block this IP address at the firewall that is in front of the Exchange server, if you have a firewall.
Or an access control list on a route in front of the Exchange box can do the same also.

Collapse -

by MikeLazz In reply to

Poster rated this answer.

Collapse -

by mgonzales In reply to someone trying to access ...

You could also put a gatway type product before your exchange server. Something like esafe or some other vendor that has a solid product. Then you can put the gateway on a dmz off the firewall and restrict only port 25 traffic to that device.

Collapse -

by MikeLazz In reply to

Sorry guy, I was lookinig for a more immediate answer.

Collapse -

by MikeLazz In reply to someone trying to access ...

This question was closed by the author

Back to Software Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums