Software

Ask something
Discussion Locked

someone trying to access my email server

0 helpful
5 replies

by mikelazz 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have been checking the logs to my email server and am noticing that someone is trying to access my email server for whatever reason. The error message that I am getting in the application log is

"Logon attempt from xxx.xxx.xxx.xxx to "random name" failed. HrLookupCredentials() call failed with error Logon failure: unknown user name or bad password.

What is the best way to prevent this from occurring? We are running Exchange 5.5 sp4 + all updates following sp4 on NT server sp6a.

5 replies

by joseph moore

You could block this IP address at the firewall that is in front of the Exchange server, if you have a firewall.
Or an access control list on a route in front of the Exchange box can do the same also.

by mgonzales

You could also put a gatway type product before your exchange server. Something like esafe or some other vendor that has a solid product. Then you can put the gateway on a dmz off the firewall and restrict only port 25 traffic to that device.

This discussion is closed to new replies.