RE: E2K Relay in SBS2000

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 13 Nov 2003 07:13:15 -0800

1. SBS2000 includes a firewall, ISA Server 2000.
2. Relaying can be allowed by an improperly configured Anti-Virus software
acting as an SMTP gateway.
3. Relaying can be allowed by an improperly configured Anti-Spam software
acting as a SMTP gateway.
4. Relaying can be allowed by Exchange improperly configured. (IIS Virtual
SMTP server.)

For the proper configuration on Exchange, search for the articles on 

John Tolmachoff
eServices For You

> -----Original Message-----
> From: Hemmings, Rob [mailto:Rob.Hemmings@xxxxxxxxxxxxx]
> Sent: Thursday, November 13, 2003 6:22 AM
> To: [ExchangeList]
> Subject: [exchangelist] E2K Relay in SBS2000
> A friend of mine has implemented SBS2000 for his client. He connects to
> the internet via a USB ADSL Modem hanging out of the back of the SBS
> Server, connecting to UK ISP "Clara-net". A static IP has been allocated
> and mail delivery to SBS is over SMTP (rather than POP3 collection).
> Clara-net have recently terminated this client's internet access as they
> have detected that the SBS/E2K Server is acting as an Open Relay.
> I went to visit the client on site, and checked out all E2K Settings -
> all 'looked' ok, but Clara-net still insist that it is an Open Relay.
> My own E2K sits behind a dedicated "SurfControl Email Filter" Server and
> Cisco PIX, and Relaying has been configured correctly. But I am not sure
> about locking down plain-old E2K so that it is not Open Relaying.
> I have suggested to my friend that he considers a 3rd party mail gateway
> (such as GFI etc), and a half decent firewall....
> Failing that, does anyone have a definitive checklist of steps to ensure
> that E2K is locked down in this respect?????
> Many thanks in advance
> Regards
> Hemmings, Rob
> Bexley Mail Administrator / Postmaster
> Senior Support Analyst
> Steria (Bexley) UK Ltd
> Rob.Hemmings@xxxxxxxxxxxxx
> --------------------------------------------------------------------------
> ---------------
> This email is confidential and intended solely for the use of the
> individual to whom it is addressed.  If you are not the intended
> recipient, be advised that you have received this email in error and that
> any use, dissemination, forwarding, printing, or copying of this email is
> strictly prohibited.
> If you have received this email in error please notify Bexley Council by
> telephone on +44 (0) 20 8303 7777.
>                 Web Site:
> ------------------------------------------------------
> List Archives:
> Exchange Newsletters:
> Exchange FAQ:
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> No.1 ISA Server Resource Site:
> Windows Security Resource Site:
> Network Security Library:
> Windows 2000/NT Fax Solutions:
> ------------------------------------------------------

Other related posts: