spammers are getting better all the time. go to samspade.or and make sure you are not on a blackhole list. it will list your external IP and mail server name. If so there are alot of things you are going to have to do. -----Original Message----- From: Noam Lerer [mailto:noaml@xxxxxxxxxxxx] Sent: Wednesday, January 22, 2003 1:51 AM To: [ExchangeList] Subject: [exchangelist] Spam or relay ?! http://www.MSExchange.org/ i have found some errors on my exchange server ( Exchange 5.5 sp4 ). It seems that someone tries to relay on my mail server but wheni try some test from the internet i can not relay. The event ID i get is 4031 on MSExchangeIMC with the following msg : The description for Event ID ( 4031 ) in Source ( MSExchangeIMC ) could not be found. It contains the following insertion string(s): <>, Undeliverable: ilanm,Tis the season.. , <Engen@xxxxxxxxx>, 553 VS10-RT Possible forgery or deactivated due to abuse (#5.1.1). what should i check ??? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: Chucksmi@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')