RE: E2K Relay in SBS2000
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 13 Nov 2003 07:13:15 -0800
1. SBS2000 includes a firewall, ISA Server 2000.
2. Relaying can be allowed by an improperly configured Anti-Virus software
acting as an SMTP gateway.
3. Relaying can be allowed by an improperly configured Anti-Spam software
acting as a SMTP gateway.
4. Relaying can be allowed by Exchange improperly configured. (IIS Virtual
SMTP server.)
For the proper configuration on Exchange, search for the articles on
MSExchange.org.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: Hemmings, Rob [mailto:Rob.Hemmings@xxxxxxxxxxxxx]
> Sent: Thursday, November 13, 2003 6:22 AM
> To: [ExchangeList]
> Subject: [exchangelist] E2K Relay in SBS2000
>
> http://www.MSExchange.org/
>
> A friend of mine has implemented SBS2000 for his client. He connects to
> the internet via a USB ADSL Modem hanging out of the back of the SBS
> Server, connecting to UK ISP "Clara-net". A static IP has been allocated
> and mail delivery to SBS is over SMTP (rather than POP3 collection).
>
> Clara-net have recently terminated this client's internet access as they
> have detected that the SBS/E2K Server is acting as an Open Relay.
>
> I went to visit the client on site, and checked out all E2K Settings -
> all 'looked' ok, but Clara-net still insist that it is an Open Relay.
>
> My own E2K sits behind a dedicated "SurfControl Email Filter" Server and
> Cisco PIX, and Relaying has been configured correctly. But I am not sure
> about locking down plain-old E2K so that it is not Open Relaying.
>
> I have suggested to my friend that he considers a 3rd party mail gateway
> (such as GFI etc), and a half decent firewall....
>
> Failing that, does anyone have a definitive checklist of steps to ensure
> that E2K is locked down in this respect?????
>
> Many thanks in advance
> Regards
>
>
> Hemmings, Rob
> Bexley Mail Administrator / Postmaster
> Senior Support Analyst
> Steria (Bexley) UK Ltd
> Rob.Hemmings@xxxxxxxxxxxxx
> --------------------------------------------------------------------------
> ---------------
>
>
> This email is confidential and intended solely for the use of the
> individual to whom it is addressed. If you are not the intended
> recipient, be advised that you have received this email in error and that
> any use, dissemination, forwarding, printing, or copying of this email is
> strictly prohibited.
>
> If you have received this email in error please notify Bexley Council by
> telephone on +44 (0) 20 8303 7777.
>
> Web Site: http://www.bexley.gov.uk
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
Other related posts: