Blocking an IP address

[EchoAlertcom]

Hello,

I have a server running Windows 2003 Server, using the IIS Version of SMTP.

There is a a computer that is sending thousands of viruses per hour to my server. I have deleted the destination mailbox so it is not receiving them. But my server is still processing the connections and the NDRs in Badmail are piling up about 1500 per minute.

Unfortunately this server isn't and can't be behind a firewall with such short notice. I do have the Windows Firewall enabled but it doesn't appear that I can block by specific IP Addresses.

Does anyone have any suggestions on how I can block/refuse connections with this 1 problematic IP Address?

Thank you,
Steve

 

[markdmac]

For starters I would look up the IP with a reverse DNS on

http://dnsstuff.com

and contact the company or ISP and get them to fix their box or to block traffic from it.

Sounds like you are not using Exchange, is that correct? Check the properties of your Virtual SMTP Server in IIS. Check under Access, Relay and report what your configuration is.

I hope you find this post helpful.

Regards,

Mark