This is an exchange 5.5 server. I think I've seen all the articles on this, and I still cant tell how they are making the server think that it should send, and sometimes it looks like it comes from an actual employee here. -----Original Message----- From: John Allen [mailto:itcalif@xxxxxxxxx] Sent: Wednesday, December 18, 2002 2:03 PM To: [ExchangeList] Subject: [exchangelist] Re: Spam exploit i cant find! http://www.MSExchange.org/ Lenny, there is a good Microsoft article at: http://support.microsoft.com/default.aspx?scid=KB;en-us;324958 <http://support.microsoft.com/default.aspx?scid=KB;en-us;324958> & The article number is 324958. You need to configure the smtp protocol to allow only the Exchange server to relay messages. John Lenny Burns <lenny.burns@xxxxxxxxxx> wrote: http://www.MSExchange.org/ After following all the instructions for locking down my server, and applying all the patches, I still get reflected (relayed) off of all the time!!!!!! I have a table of a log file from today. I need to know if someone can look at this thing and see something I'm missing. Its in MS Access now. Any place I can FTP this thing to for someone to look at or can I make it available for DL to anyone on this list? HALP! ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: itcalif@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') _____ Do you Yahoo!? Yahoo! Mail <http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com> Plus - Powerful. Affordable. Sign up <http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com> now ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: Lenny.burns@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
