Unexplained dial-up traffic.

We have a customer running SBS 2000 using an ISDN (64k) dial-up for internet
(through ISA) and e-mail (exchange).

They have been having a few intermittent problems with outgoing e-mails
where are being delayed quite often. The e-mails eventually get to the
recipients after quite a while. Sometimes when e-mails are sent out - they
arrive pretty instantly.

We have checked everthing we can think of i.e. ISA protocol and filter
settings and everything seems okay.

One thing we have noticed is that there is a lot of constant traffic on the
dial-up connection which is unexplained. We have turned internet access off
for everyone in the company through the ISA rules and still this constant
stream of data exists. Nothing we do can stop this steady stream which would
amount to about 10MBs every hour.

We have done a full virus scan with up to date definition files.

Thanks in advance.

Robbie Niblock

Les
Wed Aug 20 13:02:09 CDT 2003

You don't mention whether the the traffic is going out or coming in to
your server. Suppose you shut off ALL access in either direction with
ISA, then look at the ISA logs to see who's hammering who?

In article <bi04of$des$1$8302bc10@news.demon.co.uk>,
robbie@NOSPAMsystemsencore.co.uk says...
> We have a customer running SBS 2000 using an ISDN (64k) dial-up for internet
> (through ISA) and e-mail (exchange).
>
> They have been having a few intermittent problems with outgoing e-mails
> where are being delayed quite often. The e-mails eventually get to the
> recipients after quite a while. Sometimes when e-mails are sent out - they
> arrive pretty instantly.
>
> We have checked everthing we can think of i.e. ISA protocol and filter
> settings and everything seems okay.
>
> One thing we have noticed is that there is a lot of constant traffic on the
> dial-up connection which is unexplained. We have turned internet access off
> for everyone in the company through the ISA rules and still this constant
> stream of data exists. Nothing we do can stop this steady stream which would
> amount to about 10MBs every hour.
>
> We have done a full virus scan with up to date definition files.
>
> Thanks in advance.
>
> Robbie Niblock
>
>
>