Yes, you are indeed an open relay, unplug your Exchange server NOW, read my article again and double-check all your settings, do you have any SMTP Connectors? Mark Fugatt MCT, MCSE, Microsoft Exchange MVP Pentech Office Solutions Inc Tel: 585 586 3890 Cell: 585 576 4750 Fax: 585 249 0316 www.4mcts.com www.exchangetrainer.com -----Original Message----- From: Chris Allen [mailto:callen@xxxxxxxxxxxxxxxx] Sent: Thursday, September 18, 2003 9:40 AM To: [ExchangeList] http://www.MSExchange.org/ I have read the article on http://www.msexchange.org/pages/article.asp?id=54 and Microsoft's knowledge base articles (310380, 314734, and 304897) and verified through each of these that my exchange server is not set up as an open relay. However, ORDB.org ran a test on it and list it as such. When I found out about this, I attempted to send an open relay message from outside my network and was also able to do it. Any advise on how to stop open relay beyond what was published in these articles? We put in a new firewall two days ago (also the same day the site was submitted to ORDB) but I am not sure how a firewall would open relaying when exchange has it turned off. Any advise would be appreciated. Thanks in advance. Chris Allen Systems Administrator ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: mark@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')