Hotmail Attack??

eliud_ironport · ‎06-19-2009

Hi

Anyone have problems with hotmail?? in my case, hotmail send a lot connections and use 100% of my bandwidth, but if we block all hotmail in a routers the bandwidth down to 40 or 50%

In the "top domains by total therat messages" the first place is hotmail with 25.3k connections and in "Top domains by clear messages" hotmail have the first place with 716

Any suggestion??

Reggars

Wargot_ironport · ‎06-19-2009

You could always try what we have done, and put the IP address or partial hostnames of the Public ISP servers into a Sender Group with tighter Throttling parameters.

mychrislo_ironport · ‎06-19-2009

The SBRS mechanism and recipient verification (if you have a ldap) will take care of "almost" normal spamming, no matter it is from yahoo, google or hotmail

Do you have alot of ACL in your switch? There is some known limitation with 35xx series of cisco......T-CAM issue.

http://blog.ioshints.info/2008/01/tcam-on-catalyst-switches.html