RE: Relay Nightmare

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 25 Sep 2004 23:54:28 -0500

Hi Craig,
Do a NetMon trace and identify the source IP address of the relayed
spam. It could be that your users are infected with a spam generator and
the spammer is leveraging their authenticated connections.
Tom <> 
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004 <> 
MVP -- ISA Firewalls

        -----Original Message-----
        From: Craig_Weil [mailto:craig_weil@xxxxxxxxxxx] 
        Sent: Friday, September 24, 2004 2:02 PM
        To: [ExchangeList]
        Subject: [exchangelist] Relay Nightmare
        Running Exchange 2000, default settings for the smtp virtual
server... (Anonymous Access - so we can receive outside email, Basic
Authentication, Integrated Windows Authentication all checked, Relay
restrictions set to "Only the list below" which is empty and "Allow all
computers which successfully authenticate to relay..." checked so that
employees can send mail while connected to another ISP, Outbound
Security options set as default - Anonymous Access checked)
        My server is STILL relaying mail.  I can look in any number of
queues and it's like a clearing house for spam.
        Any ideas?
        Much appreciation!
        List Archives:
        Exchange Newsletters:
        Exchange FAQ:
        Other Internet Software Marketing Sites:
        World of Windows Networking:
        Leading Network Software Directory:
        No.1 ISA Server Resource Site:
        Windows Security Resource Site:
        Network Security Library:
        Windows 2000/NT Fax Solutions:
        You are currently subscribed to this Discussion
List as: tshinder@xxxxxxxxxxx
        To unsubscribe visit
        Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: