RE: How to prevent unauthorized use of my SMTP server?

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 8 Aug 2005 12:42:02 -0700

Allowing relaying of 127.0.0.1 can open up a can of worms if you install any
other software on that server. There is no reason to include relay for the
server itself as that is inherent.

 

John T

eServices For You

 

-----Original Message-----
From: Nicolas Verhaeghe [mailto:nicolas@xxxxxxxxxxxxxxxxxxx] 
Sent: Monday, August 08, 2005 11:18 AM
To: [ExchangeList]
Subject: [exchangelist] RE: How to prevent unauthorized use of my SMTP
server?

 

http://www.MSExchange.org/

I cannot find the box you describe.

 

Instead I have an Access Tab with a Relay button which opens a setup window
which I set to the following:

 

"Select which computer may relay through this server:

 

Only the list below

 

In the list:

 

Granted: 127.0.0.1

Granted: (my domain without the .local extension)

Granted: (my group of IP addresses)

"

 

Unchecked "Allow all computers which succesfully authenticate to relay,
regardless of the list above"

 

Grant or deny relay permissions to specific users or groups: "Authenticated
Users" is allowed to submit permission (only box checked)

 

Am I alright there? Should I specify my domain as FQDN or only it's short
name without the extension?

 

  _____  

From: Alex Gonzalez [mailto:AGonzalez@xxxxxxxxxxxxxxxxxxx] 
Sent: Monday, August 08, 2005 10:47 AM
To: [ExchangeList]
Subject: RE: [exchangelist] How to prevent unauthorized use of my SMTP
server?

Go to the SMTP virtual server and go under relay and make sure the radio
button is checked "only these servers may relay".  

 

 

  _____  

From: Nicolas Verhaeghe [mailto:nicolas@xxxxxxxxxxxxxxxxxxx]
Sent: Mon 8/8/2005 1:45 PM
To: [ExchangeList]
Subject: [exchangelist] How to prevent unauthorized use of my SMTP server?

http://www.MSExchange.org/

How do I make sure that my SMTP server is not open to the rest of the
world?

It seems that I need to have port 25 opened in my firewall to allow
incoming mail, but when I do that, don't I risk letting outsiders use my
SMTP to send their spam?

How can I monitor this activity and also how can I make sure that no
non-authenticated users use my Exchange server?

Thanks a lot!

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
agonzalez@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: